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Coping With COMPUTIST 



Welcome to COMPUTIST, a publication 
devoted to the sciious user of Apple If and 
Apple ][ compatible computers. Our magazine 
contains info (mat ion you are nor likely to find 
in any of the other major journals dedicated to 
the Apple market. 

New readers are advised to read this page 
carefully to avoid frustration when attempting 
to follow a softkcy or when entering the 
programs printed in this issue, 

■ What Is A Softkey Anyway? Softkey is 
a term which wc coined to describe a procedure 
that removes, or at least circumvents, any cvypy- 
protection on a pHrticulur disk. Once a softkey 
procedure has been performed, the resulting 
disk can usually be copied by the use of Apple's 
COPY A program (on the DOS 3,3 System 
Master Disk), 

■ Commands And Controls: In any arriclc 
appearing in COMPUTIST, commands which 
a reader is required to perform are set apart by 
being in boldface and indented: 

PK#6 



The (RETUfiNJ key must be pressed at the end of 
every such command unless otherwise 
specified. 
Control characters are specially boxed: 

Press \S}. Next, place one finger on [ctrl| 
and press [P], Remember to enter this 
command line hy pressing IbeturwI . 

■ RequirementST COMPUTIST programs 
and softkcys require one of the Apple j{ series 
of computers and a disk drive with DOS 3,3, 
These and other special needs are listed at the 
beginning of the article wider "Requirements", 

■ 5k)ftware Rceommendalions: 

J) Applesoft Program Editor such as Global 
Program Line Editor (GPLB), 

2) Sector Editor such as DiskEdit (from the 
Book of .Softkeys vol I) or ZAP from Bag of 
Tncks, 

3) Disk Search Utility such as The 
Inspector, The CIA or The CORE Disk 
Searcher (from the Book of Softkeys vol 11). 

4) A^isembh-r such as the S-C Assembler 
from S-C software or Merlin /Big Mac. 

5) Bit Copy Program such as Copy ][ Plus, 
Locksmith or The Essential Data Duplicator 

6) Text Editor (that produces normal 
sequential text tiles) such as Apple writer II, 
Magic Window I] or Screenwriter II. 

COPYA, nD and MUFFIN tram the DOS 
3.3 System Master Disk are also useful. 

■ Super lOB: This powerful deprotectioii 
utility (COMPUTIST 32) and its various 
controllers are used in many softkeys. This 
utility is now available on each Super lOB 
Collection disk. 

■ RESET Into Ttae Monitor: Softkeys 
occasionally require the user to stop the 
execution of a copy-protected program and 
directly enter the Apple's system monitor. 
Check the following list to sec what hardware 
you will need to obtain this ability. 



Apple }[ Ptux - Apple lie - Apple r.ompntihlex: 
1) Place an Integer BASIC ROM card in one 
of the Apple slots, 2) Use a non-maskable 
interrupt (NMI) card such as Replay or 
Wildcard, 

Apple JfPtus - Apple compatibles: 1) Install 
an F8 ROM with a modified RESET vector on 
the computer's motfaerboard as detailed in the 
"Modified ROM's' ^ article (COMPUTIST 6 
or Book Of Sottkeys III) or the "Dual ROM's" 
article (COMPUTIST 19). 

Apple lie - Apple lie: Install a modified CD 
ROM on the computer's motherboard. Cutting 
Edge Em. (Box 43234 Ren Cen Station-HC; 
Detroit, MI 48243) sells a hardware device 
that will give you this imponani ability but it 
will void an Apple //c warranty. 

I Rceummcndcd Literature: The Apple ] [ 
Reference Manual and DOS 3.3 manual are 
musts for any serious Apple user. Oilier helpful 
books include: Beneath Apple DOS, Don Worth 
aiid Pieter Lechner. Quality Software; Aixembly 
Lani^uage For The Applesoft Programmer, Roy 
Meyers and C,W. Finley, Addison Wesley: and 
What's Where In The Apple, William Lubcrt, 
Micro Ink, 

9 Keying In Applesoft Programs: BASIC 

programs are printed in COMPUTIST in a 
format lliat is designed to minimize errors for 
readers who key in these programs, if you type: 

ieHOME:REMCLEAR SCREEN 
The LIST will look like: 

10 HOME : REM CLEAR SCREEN 

b>ecause Applesoft inserts spaces into a program 
listing before and after every command word 
or mathematical operator. These spaces usually 
don't pose a problem except in line numbers 
which contain REM or DATA commands. 
There are two types of spaces; those that have 
to be keyed and those that don't. Spaces that 
must be keyed in appear in COMPUTIST as 
delta characters (' ), All otiier spaces are there- 
for easier reading, NOTE: If you want your 
checksums (See "Computing Checksums" 
section) to match up, you must only key in 
C ) spaces after DATA statements, 

■ Keying In Hexdiimpsi: Machine language 
programs are printed in COMPUTIST as hoth 
source code and hexdumps, Hexdumps are the 
shortest and easiest format to type in. You mu.st 
first enter the monitor: 

CALL -151 

Key in the hexdump exactly as it appears in 
the magazine, ignoring the four-digit checksum 
at the end of each line (a "$" and four digits). 
A beep means you have typed something that 
the monitor didn't understand and must, 
therefore, retype that Imc. 

When finished, return to BASIC with: 

£ee3c 

BSA VE the program with the correct filename, 
address and length parameters given in the 
article, 

■ Keying In Source Code The source code 
is printed to help explain a program's operation. 
To key it in, you will need the S-C Assembler, 



Without this assembler, you will have to 
translate pieces of the source code into 
something your assembler will understand. A 
table of S-C Assembler directives appears in 
COMPUTIST 17, 

■ Computing Cttcckiiums Checksums arc 
four-digit hexadecimal numbers which tell if 
you keyed a program exactly as it appears in 
COMPUTIST. There are two types of 
checksums: one created by the CHECKBIN 
program (for machine language programs) and 
tlie oilier created by llie CHECKSOFT prognun 
(for BASIC programs). Both appeared in 
COMPUTIST 1 and The Best of Hardcore 
Computing. An update to CHECKSOFT 
appeared m COMPUTIST 18. If the publish^ 
checksums do not match those created by your 
computer, then you typed the program 
incorrectly. The line where the first checksum 
differs has an error, 

■ CHECKSOFT Instructions: 

LOAD fllename 
BRUNCHECKSOFT 



Get the checksums witli; & IbeturwI and eorrec-t 
the program where the checksums differ. 
■ CHECKBLN Instnictioos: 

CALL -151 

BLOAD program filename 

Install CHECKBIN at an out of the way place 

BRUN CHECKBIN, A$6M» 

Gel the checksums by typing the starting 
address, a period and ending address of the file 
followed by a EX) ^HS - 

xxx.xxk ISYI 
Correct the lines at which the checksums differ. 
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You have a LEGAL RIGHT 
to an unlocked backup copy 

Our editorial poltcy Is thitt we do NOT condom 
software piracy, but we do twileve that usen are entitled 
to backup commercial disks they have purchased. In 
addition to thia security of a backup disk, tfte removal 
of copy-protection gives the user tne option of 
modifying programs to meet his or her need^, 

Funhermore, Uve copyright laws guarantee your 
right to such a DEPROTECTEU backup copy: 

..,"11 u niAm Liiltii^eiiicaL Ilii iIk u\vufr ui a i.Q^\ ul li 
umtijmter pmgram ti> ntatfe nr suthorii^e Ihe making of annlh£r 
L:iipy nr ad^isiioR nt liisr i^nrnputer program pnwidedr 

I ) thai such a new ct^ or adti{MiJi>n is crcaicd an an csjcndal 
step in [he utilizalion of Ihc computer program in conjunction with 
g mgthiK and tliar it is used in np o(iref nujiEKr, of 

1) [hai ^udl ii&ft copy or adapuUDn is tot archival purpciu:^ 
{inly and thut all an:l]iva] copies are d£^m^cd in the event EiidE 
continued possession ^ tlie eoniputer program sliould cease Eo 
be rightful. 

Any exact civics prepared in KxardaiKC with the provisions 
of Ihii stKiion may t« leassd, sold, or otherwise trsrasferred. along 

Willi the e[ipy frum wtm:li i^wA\ etipim were picpimi, [inly ^ pLut 

of the tew, sale, or tiikr transfer of nil riRhts in the proErsm. 
Adaptatiwis so prepareii may be tiansfemd only with i!w 
authoriz^^n of thfi copyright owner," 

Uisiud States Codt tirlt 17, H 17 117 USC 1171 



You asked for it... 



A Disk -Magazine Combo Subscription! 
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COMPUTiST now has a combination library disk dc first-class j 
subscription rate to save you even more. With this new XOMBO^ 
subscription, you will receive each monthly issue APiD its [ 
corresponding disk for as much as 45% off the individual rate, 

COMBO subscriptions are sent U.S. First Class mail. APiD, If you have at least 5 
issues left on your current subscription, you can even UPGRADE to this new offer. 



OLD JVEWS: 

COMPUTISTs 

annual 
subscription 
rate has 

Old Rates: 

U.S. Domestic $40 per year 
U.S. First Class $48 per year 
Canada and Mexico $68 per year 
All other foreign $120 per year 



Yes I want to subscribe. Enclosed are U.S. Funds (drawn on a U.S. bank) 
for a 12 issue subscription. 

n New Rub.si:riber D Please renew my subscription 

D U.S. $32 D U.S. First Class/Canada/Mexico $45 D Other foreign $75 
Combination magazine and corresponding disk subscriptions; 
n U.S. /Canada/Mexico $100 D Other Foreign $140 

7(9 upgrade your suhscriptinn to a combo xuhacriplion. U. S. /Canada/Mexico send S5.50 
per remaining issue. Other Foreign send $6.10 per reittaining issue, You must have at 
least 3 issues remaining ro take advantage of this upgrade offer. 



Name^ 



_ID#_ 



Address 



Cily 



S(i)(e 



Zip 



Country . 



Phone . 



Exp.. 



Signature . 



. CP39 



U.S. Funds drawn on U.S. bank. Subscription will not commence until funds are 
received. Send orders to: COMPUTIST FO Box 110846-1 Tawma, WA 98411 



EXPIRED? 

Keep your subscription 
ALIVE! 



Check your mailing label to see if you 
need to renew your subscription. And if 
you think you might forget when the time 
arrives, renew right now. Just use this 
order blank. Remember, late renewals 
cannot be back dated. 



if you're moving 

Let us know at least _30 days in advance .so that yotJ won't miss 
a single issue. Just write your new address on die order form above, 
and your old address below (or include your present address label). 
I Issues missed due to non- receipt of Chan ge-of- Address may be 
acquired at the regular back-issue rates. Please remember, the Post 
Office does not forward tliird class mail unless requested. 
I COMPUTIST is not responsible for replacing issues lost while 
forwarding order is in effect. 



Name 



_ID#_ 



Address 

City 

Country 



State 



Zip 



Phone , 



s.o.s 



(Save On Softivare) 



Title 

n Beneath Apple DOS (Book) 
n Beneath Apple ProDOS (Book) 



Publisher 



Quality Software 
Quality Software 



Price QTY 



$16.00 
$16,00 



Total 

Cost 



Q Global Program Line Editor Beagle Bros 

n Magic Window // (spet;ify j[ or //e) Artsci 

D Bag of Tricks II Quality Software 



D Homeword Word Processor & 
(indicate 64K or 128K) 

D Homeword Filer 

D Borrowed tinie 

D Amazon 

D Speed Reader ][ 

n Donald Ducks Playground 
Great American Rd Race 
Computer Prep for SAT 
Beyond Castle Wolfenstein 
T!ie Caverns of Frielag 
Silent Service 
Swashbuckler 



n 
n 
n 

D 
D 

n 



speller 

Sierra On-Line 
Sierra On-Line 
Acti vision, Inc 
Spinnaker Software 
Davidson & Assoc. 
Sierra On-Line 
Activision, Inc 
Harcourt, Braee 
Muse Software 
Muse Software 
MicroproRe 
Datamost 



$35.25 

$106.00 

S39,75 



S55.50 
$55.50 
$32.00 
$12.75 
$49.50 
$24.00 
$32.00 
$62,25 
$24,50 
$12.00 
$27.75 
$15.00 

Subtotal 
Shipping* 

Total 



$3.00 



^Foreign orders, please inquire ais to appropriate shipping fees. 



Name. 



-ID#. 



AddrcsK. 
City 

Country . 



State 



Zip 



. Phone , 



Exp. 



Signature. 



_CP39 



To order, complete order form and mail to: 
COMPUTIST PO Box 1 10937-SOS Tacoma, WA 98411 

Offer good while supplies last, Washington residents add 7.8% sales tax. Foreign orders inquire 
as to appropriate shipping and handling fees. Limited offer, expires February 28, 1986. 



Graphics by Spinnaker Software's * Amazon' 



lllltlllllllllllllMlilllllllllllMlMlllllllli: 
IIIIIIIITIIIIIJIIlllilllllllMUlllllllMIKIM 
mill iiiiii III I II til I II I mil [iiii I till I Ml Ml 

tlllllllllMMKMIMllllllllEllllllllllllliHl 
■ ItH 

irMMMlllHIIIIHIIII 1 1III IIII IIIIII 111 I 

Wlli m 
IfMllMllt^^MVinilllMIMIIIIIMIIIIMlM 



IttlllllH 
Itllll^H 

IIIII^H 
lUM*^ 



■ llllilfllllllllllllllMIIMMfUllt 



■ 1IH 

■ III . 



PIIIMIMtMTin Illf 



llllllll ^IIIIIIIIJIIIIIIIIIMIIII 

IlllltH] I 

■Mini I ■IIIIIMIIIIIIIIIIMIIH 

— l ^llTilll IB 
IIIMI^MHMIMl t ■IMITIMMllllEllillM 

■ ■ I i a 

IIMMiMII^IMM I lilMIIMIMIIIIilllMTI 

v^miM I I ■ ^mm 

iiiMiiM^^ IIII tiiiriiJiiiii^iiit 

^M t 1 I 1 I I ■IIIIIIJH 

mtiilllJ^^H IIII IBIIIMllMltMIIM^ 
Wt I I 1 I » ■1IIMIMJH 

IJII 111^ I I IK IM^IHIIIM IM 

1 I I IHH t| NMlllini 

llllMIEIltl^ I I IHH ^Mtlllt^lJIMMI 

^m. I {■■ii I ■iiiiiLii 

tlllMIIIIIBHIl I IBH IIIIIII1IIHJII1III 

MtalV I IMHH ■ HMIMI 

ll]|IMMIIB«B I 1I|BSK«IIIIIIIIH 

■ ■■II [■■■■I «Mlll 
IIIIMIIIHItHaii IBMSHIllMtllllBIIIM 

■ ■■■■IIHffPnS MItll 
MMMlllHSHHHHVHiBHIIIMiiliiiHliiii 

iiii[iiiiiliy|a||jM|VJM'Ji'"^"'>iiBii 

■ II 



IIMIMIH 
MIIIIII1I 
IMIIIMII 
llMIIMBI 
IMIIIMII 
IIMIIMHI 
IIMIIEIII 



■ III 



ll^ll 



IIMJIIHMil 

I II 

PIMIMIMIIH 

■ II 

■ IIIIIIIMJIII 

■ ■ 
ilMlMirMtlll 

■ ■ 

■ lllllllllllll 
IM 
^MlMllMMt 

IHMtimiMII 

la 

^lllllllllMt 
^■llllllllllll 
I^MlMltlllM 



■ lEMIMIILM 

M itiua^iiai 

atpilllllIIII^HIITH 
IHH ■lliniHillllH 

■ ■^tll^MltHBIIIIi 

lami iiiii^Miiii 
■■^iiiiiiiiiaiMiiiBiiBiiiitiiiiinitii 

IHH^ IIIIIIHIIIJMVIMIIIIt 

■ HIBHIIIillilHIMIMIHIIIMIIIIIIIiIMIM 
!■■■■ KlliaillllllSlllilll 

■ ■■■IliHIiiaiMIMIMIIIMiaiMIMIMIII 
IHHH^ ailllHIIltlllfllJIIIB 
■■■■■ilBIIIIHIIIIMIHIllliailllllllMIl 

[■■■■^ ■iiiaiiiiniaiiiiii 

■■■■■HIIIIIHIMITIIVMIIIIIIMIMIMM 

mnai'iiv^ iiiiHfiiiiMisiiii^^^^^^^ 
apww ^i»aMHMiaiiii» i i i i i 
1^^^ I ■isaiiiiiiinniii I i i i i i 
•I I I I I t I ■■■iiiiiiiaiiiia I I I I I 

>! I I i ( I I I lifelMMIIMtHIMI I 4 I I t I 

I I I I I I I iBiiiiiMiMlaiiia I I 1 I I 
llllllll ■iiBMiiiiiaiMta I 1 I I I 
1 I I i I I I iHiMsiiiiiiiKini 1 IIII 

llllllll ■IIMaillMIIHMIH I IHH I 
llllllll llMHMIMIiaMl^^HHHI 

IIIIII ii^aiiiaiMiiiaiiiaaaaaa 

IIII ^^■^lll^lllllHlll^HHHBB 
ll}M 



■aam 



liiaiT 



■III 



lllllillHIV I 1 ■■■ 

■■^■■■■■■■■■■■iMiiMaii 1 I I ■■■ 
laHBaaaaa^iiiaiiiiiMiai i i i ihi 
■aaaaaaaja aiiaiiMiiiiai I i i i li 

IHMHHHHaHl ■IIHIJtMJMHll I I I IH 
VWHWHaBHil I IIIIHIIMIMIH I I ( I [ I 

laaaaaawi i iriiaiiMiiiia i i i i i 
aaaaaa^ i i ■MaiitMiiiiM i i i t i 

IHHHHH^H J I lllliaitlltlll Vi I I I I 

aaaaa^ i i i ■mmiimiimi^^i i j i 
i^^^^i I 1 I 1 BiiEaiiniiit^a I i i 

ait I % ^Hl I I I ■IIIIHIIIIIIITHMB I I I 

■ I I I I I I I 1 I ^■iiiHMiriir^H^i I 
I I I I I I 1 I I aaaiiiaiiiiiiii^aa I i 
I I 1 I J I I I iHaatMairtiniaaaa i 

llllllll ^■^lllHIIIHIIIMaHl I 

1 I I f I I I .^■a^iiHiiiiiiiH'Hivtaii 

I I I I I I I ^avviaita ^bb^ 

I I I I I I ^aaaaaiiaiMiMiaiaaa 

t I I I I I iMaa«^iHiHiiiiiiiHHiHm 
^aaaaaMaiviiiiii^HHH 

II ^^^HaaaaHiiaiainiHaaaai 

I ^^■■■■■■■■■llfHfHIllll^HH^ 
I VHHHSHHHHH^IKIHHIllllHSHHa 

■aaaaaaaaBaaiiii^iiiMiHiaaH 
^aaaaaaaaaaiiiii^iiiiii^aai 

^■■■■■■■■■■■llliaiWtMllHHHH 
aaaaaHHHHHH^IMIH^llMIMIHIIfe 

laaaaMBKBaaaMiiiaia^iiii^^^ 
aaaaaaaaaa a^ iiiaiMiiiiwi 
laaH^aaaaaH^^iiiHiiHiiiji^Hii 
■■■■■^■Kaa^aMTaiiHiiiiiHHHB 

itiimaa 

ltlllHHH> 
IIMI^HB 



nil 



■ MiaiiiB 



Mil 



IIIIII 

■■■■■iMianHiaaaMiaiiiiHMiHHHi 
iHHHHiH^^aiaa^Miaiiikmii^Hv 

aaBafliaiHHHHHHIIIBIIII^IIH«lbfe 

RBaBBiiii^aBB^iiiaiiii^i^Ba 

aaaaBiiiiiiiiBBBaiMaiiii^^HBHi 

IHHKHMHIHHBH^lMaMMaia^HB 

aaa^iiai^aaaaiiiBiiM^^aai 

(■■^■Blliaif aHHHHllHIIIIHHHH^^ 
MH^BIJIHlBHBK^MBMMaBMBiaill 
laaH^ltHII^BHHHMHMIIHHH^lMI 

■ aBBHlEIBI^BB^II^Ill^BBIItll 
IH^aBIIIBMIBBBBIIiaillBBHIIIlll 

■ ^■■^ITIBII^BH^IMHIll^HBIIMII 
IMiaBliniBl^BBBMIBIllBBHIIIIM 
^BBBI'MBIOBBMtllSIHM^nilll 
^■■■■IMBIIKHHHIIIKIIIHBIMIMM 

■ ■HBIIIIMliBirHH^IMHMI^^MtMM 
IBBBBHIMIBIIRBBBIMMMIBBilllllM 
(■■■■milMIHII^H^^IMHIIKH^MlMM 

■ ■■■■VIIMiail^HHIMHII^HIMIMM 

■ ■■■aHIMIHIIBH^IMBi»IBaillMlllll 
IBBBBBIIllllBIHBBIllBllHBIMIMil 

■ BBBIWIIIIIBIIH^IIIBIIBBHMIIIII 
IHHHBHBIMIIIHIBHaillHII^HBlMIMI 

■ ■■■■^MIIIBI^^MTBilBB^lMIMI 
IBMBBBHIIIIIIlllBBIITBIi^BlMIIIII 

■ ■■■■■.■ Ml MMIB^IIiailHH^IMIITI 

IHHHHHai MtHBMIHll^HHIMItl 

BBBBBB^ IBBIIBIIBBBKimil 

IHVmilPBIWIIMIMM^IIHll^H^ltMM 

■ ■■■■■■■ ill I MItll BltBl IB! BIBHMIl I 
■ ■■■■BHIIIIIIIII^IIH]IVIBB«M1l 
IMBBBBMailllllimBllBIIBBBBVIM 
IIBBBBBBHIIIMIiMllBllMBBBIIM 

IIBaHHBHH^ItMI^IIHM^BHB^II 
IHBBBBBBBIllllH^IBIIBBBBBllI 




II i SEftTTLE 
I' ; SOLT LftKE 

.HORrtflL ROAD COMDITIOHS AHEflO 







nph mo 
. L 




Hiis m(>rt/A 's coven 

Graphics from JfUHitni's "AmuzotL " 

Address ell advertising inquiries to COMPUnST^ AdvertLsfng 
Oepartmem, PO Box 110816, Tacoma. WA 98411, Mail 
manuscripts or requests for Writer's Gujciea to COMPUTtST, PO 
Box n0fl46-K, Tacoma. WA 98411 

Unsol Idled manuscripts a'e assumed )□ be submitted for 
publication at our standard rales of payment. SoHKey publishir^g 
purchases all and exclusive righls. For more informalion ort 
submiUing manuscripts, consult our wfiler's guide. 

Entire contents copyright 1983 by SohKey Pubitshino. All 
rights reserved- Copying done (or other than personal or Internal 
relerence (wiltiout express written parmtssion Irom the publislwrj 
is pratilblted 

Ttie editorial staff assumes no liabltily or responsibiffty lor the 
products advertised in the magazine. Ar^y opinions expressed 
by ihe auitiofs are not necessarily those of CONAPUTIST 
magazme or SoHKey Publishing. 

COMPUTIST will replace losl issues for SO days following iba 
pubiicalion date. We cannot be held responsible For mail loss 
after eo days. 

Apple usually refers lo an Apple ][ computer and is a tractemark 
of Apple Computers. Inc. 

SUBSCRIPTIONS; Rates {for 12 issues); US S32, U.S. 1st 
Class, Canada & Mexfco £^5, Foreign 575. Oireol inquiries to: 
COMPUTfST, Subscription Departrrtent, PO Box llOaiM. 
lacoma, WA 96411. 

DOMESTIC DEALER HATES: Call (206) 474-&750 Jor more 
information. 

Clunge Of Address: Please allow 4 weeks for cha/^gs ot 
address lo lake eftect. On poslai form 3576 supply your new 
address and your meat recent address label, issues missed dua 
to non-receipl ol changa cjl address may be acquired at the 
regufar back Issue rale. 
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Technical Editor: RntKn Knowle^ Circiilatlon: Debbie HollDway, Helen Defies 

Advenkjng: (206} 474-5750 Printing: Valco Graphies Inc., Seattle. WA 
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softkeys: 

22 MIDI/8 Plus 

by Ray Darrah 

23 Homewrord v2.1 

by The Nipper 

24 Borrowred Time 

by Jeanne Edwards 

26 Amazon 

by Rich Eta rip 

28 Speed Reader II 

by Tim Beckmann 

features: 
16 Electronic Disk Drive Sivapper 

Have you ever wanted to bwt iTom drive 2? With this article you can do just that and much 
more, by William Wingfieid Jr. 

18 Abusing the Epilogues 

This article demonstrates a simple yet effective way tjf copy protecting a diskette. 
by Rich Etarip 

19 Print shop Companion's Driver Game 

That's right. There is a secret game contained in the Print Shop Companion. Now you can 
remove it and play it at your convienence, by Marc Batchelor 

core: 

20 Keyboard Repair 

Chances are that eventually a key on your keyboard will stop functioning. Now you can 
use a TI/99 keyboard to perform the repairs yourself, by Philip Goeiz 

2 1 Fixing the Applesoft Sampler Disk 

This modification wilt allow the Applesoft sampler disk that comes with the Applesoft tutorial 
to work on the lie. hy Jerr\ D. Greer 

:■ ■ ■ "^'. 

hints: --- 

14 Carmen Sandiego 

by Jeff Wicker .., 



departments: 



4 

7 



Input 
Readers' 



Sofftkey & Copy Exchange 



Softkeys for: Discovery!, M-ss-ng L-nks series, Donald Duck's Playground, Mastering the 
SAT, Copy ][ Plus 4.4C, Master of the Lamps, One on One, Bridge Baron, A. E., Great 
American Cross-Country Road Race, Computer Preparation for the SAT, Castle Wolfenstein, 
Luscher Profile, Skyfox, Silent Service, Echo Plus, Swa,sh buckler, Randamn 




Please address letters to: 

COMPUTIST 

Editorial Department 

PO Box 110846-K 

Tacoma, WA 98411 



Include your name, address and 
phone number. 

Correspondence appearing in the 
INPUT section may be edited for 
clarity and space requirements. In 
addition, because of the great 
number of letters that we receive and 
the small size of our staff, a response 
to each letter is not guaranteed. 

Our lecfinica! staff is available for 
phone calls between 1:30 pm and 
4:30 pm (PST) on Tuesdays and 
Thursdays only. 

Opinions expressed are not 
necessarily those of COMPUTIST or 
SoftKey Publishing 



A Square Deal 



rvt got four tilings to say here, the first is 
being to compliment you on your excellent 
niagazjni;. it's well wortti llie subscription pricel 
The; next is to contribute to the already tiuge 
pile of Rescue Raiders APTsi: John Clements 
detailed all the "ZIPPY" commands in 
COMPUTIST No. 26, but left out the "shield" 
command. Pressing <RETURN> toggles an 
invisible shield which protects your helicopter 
from all machine gun tire (from other 
helicopters, men, tanks. AAguns. everything!) 
and shrapnel. I would also like to add that 
"ZIPPY" is also a toggle, so typing it twice 
turns it off. Mere are some Rescue Raiders 
sector edits: 



Trk Set Byte Frorr To Effects 



00 


00 


54 02 F0 missiles 


SF 


04 


9A i 9B F0 2D EA EA borrbs 


I3F 


04 


2D 8 2E F0 E3 EA EA bullets 



hundreds of 'eml). i advise makmg u backup 
of your backup because these sector edits do 
strange things (besides their listed fiinction). 

Again, my next subject has been detailed. 
(COMPUTIST No. 34 "More ROM Rucming" 
hy Wes Felty), and again I have something to 
add: a fun thing to do with your language card 
is to modify ROM (WAJTAMiNm Modify 
WHAT?), thats right ROM, or at least a copy 
of ROM. For this trick you must have a 
language card (standard on a Its and lie): 

CALL -151 
C»81:e 

D»»«<D»e».FFFFM 
C983:e 

ce83:e 

Now an active copy nf the ROM (in the 
language card RAM) can be modified, even 
saved to disk and loaded at another time I To 
restore the original ROM hit RESET. II that 
doesn't work, them power down and up again. 
Notice this also lets you modify Applesoft! 

Finally, here is a program to add a textftlc 
viewing comjiiand to DOS 3,3 in place to the 
useless "CHAIN" command: 



0300- 


A0 04 B9 2D 03 9S 92 A8 


030S- 


88 D0 F7 A9 DE 8D 26 9D 


0310- 


A9 BC 8D 27 9D A0 21 B9 


9318- 


31 03 99 DE BC 88 00 F7 


0320- 


A0 00 B9 98 AB 99 97 AS 


0328- 


C8 C0 6F D0 F5 50 56 49 


0330- 


45 07 20 C6 A5 A9 3D 20 


0338- 


ED FD 20 EF BC D0 F8 4C 


0340- 


EA A2 AD m C0 C9 A0 F0 


0348- 


03 4C 8C A5 80 10 C0 A9 


0350- 


00 50 00 00 00 00 00 00 


To 


save, type; 


]BSAVE VIEW,A$3ee,L$52 



The first two give you infinite missiles and 
bombs. The last one changes your normal 
macliine gun bullets into napalm (and you get 



To install it, type: 

IBRUNVIEW 

To ^Sethis, first install it, then type "VIEW 
<filenan]e>" and the text file will be dumped 
to your scre en. < SPACE> will abort the 
viewing, and |f:::1S| will p.^nse it. This is a very 
handy program for a BBS (I should know). 

Now you can INIT a disk and the patch will 
be permanent. Be carefitl though because other 
patches may use the same space at SBCDF 
because il is a large free area of DOS- 
Radioactive Snail 
Dallas, TX 



All Pirates, Please Stand Up 

This letter is to support the one in 
COMPUTIST No. 33. 

No one buys original software these days 
except 13 -year-olds and coniputer user groups. 
Out of my 6800 disks, I have 8 pieces of original 
software. All of wiiich, either came with a piece 
of hardware I bought, or someone gave it to 
me to crack and let me keep his original (my 
faithful customers). But the world is wrong 
about us pirates. We do more than crack 
software. Pirates have written some great 
programs! Who do you think makes all nf those 
Music Construction Data Disks? Electronic 
Arts? Ha! Who do you think wrote programs 
like Nibbles Away and Copy n Pius? You show 
me one person in the entire U.S. that has all 
original software, and I'll show you 10.000 
Pirates who will laugh him out of the country! 
Even Mr. Moses, who claims to hate piracy, 
bitt would not have any kind of software library 
without us. Face it, piracy is such a popular 
trade, some guy.'; make money for doing it. Me 
and a bunch of friends own a company called 
Sectorware Enterprises, and we charge S50 an 
hour to crack software. We have money coming 
out of our ears and its ail coming from the so- 
called people who are against pirates. 

Mr. Sector 
Address Unknown 



Filing Karateka 

In reply to Mr, Batchclor's problem with the 
Karateka softkey (COMPUTIST No. 34), ! too 
had a problem. Somewhere around step 10 
(maybe earlier), when it did some code reading, 
the computer would hang, and pressing reset 
dropped mc into the monitor, but it garbaged 
parts of memory. My solution was to keep the 
drive nmning. To accomplish this, one of two 
ways may be used. First, you can just leave the 
drive on throughout the entire softkey {opening 
the drive door will prevent wear and tear on 
the disk). At no time should you type (from the 
monitor) C0E8, wliich shuts the drive moter off. 
The second way is a little harder, and it requires 
a little more than IK of memory in your head 
to remember. After each step (or whenever 
itiere is disk access), type C0E8 (from the 
monitor). This will shut off the drive motor. 
Continue the step, but just before the last 
instruction, type C0E9. Tliis turns the drive 
back on. Even though you may not need it in 
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some places, it's a good idea to do it, just in 
case. Right around step 14 this procedure ean 
be scratched. I also used Mr, Wong's Karateka 
Fix (COMPUTIST No, 30). It stated (for those 
of you that missed it) that step 17 didn't work 
(A851G did not reconnect DOS). To get around 
this, boot the slave disk and save the appropriate 
parts, then loop back to step 15. 

f Totiey Phalen 

Garden Grove, CA 



Fixing Crisis Mountain 



I have tried a few different softkeys for Crisis 
Mountain, but Rene Gaudct's solfckcy in 
COMPUTIST No- 34 was the first one to work 
for me, "there was only one problem in that if 
you got a high score the program would bombl 
1 t~ixcd this by using a sector editor and getting 
track 0, sector 2 from a disk with normal DOS. 
Then I wrote it back to the Cracked Crisis 
Mountain disk. It workedl!! 

Next I tried Danny PoUak's APT for 
bypassing tlie tide page, which takes forever. 
It didn't work so I played around with it and 
made the following changes to track 7 to totally 
skip the title page. 



TRACK SECTOR BYTE FROM 



TO 





m 


AC 


m 


18 




0B 


D3 


0C 


3A 




0C 


EC 


20 


4C 




m 


ED 


53 


99 




m 


EE 


49 


« 




m 


4C 


4C 


4C 




w 


4D 


sc 


99 



I 



4E I FORGOT! 42 



Now the game starts right off with asking you 
to hit button 0. 1 hope this will help some of 
the iiigh score players out tiiere. 

Robert Rowe 
Spring Valley, CA 



Exploring Bank Street Writer 



The Bank Street Writer softkcy of 
COMPUTIST No. 25 lias one big bug. If you 
make the sector edit on track S&4, sector $&7, 
byte S3 7 as directed, it becomes impossible to 
save documents tu the data disk. 



If the byte is restored to normal value, 
documents can be saved hut a.'i noted in the 
article the utilities will not save changes to the 
disk, 

Investigation of track $94, sector $07 sliows 
that it contains the data table to change 
prologues and epilogues from program disk to 
data di.^k values. 1 changed the program bytes 
to noimal DOS values and sure eaougli witlioui 
making the edit to byte $37 the utilities 
functioned perfectly. However the Data disk 
could again not store data. 

I then changed one byte of the now normal 
program prologue bytes to SFF (it doesn't 
matter which byte); the result: utility saves don't 
function but data disk saves ftinction normally. 

Obviously BSW compares the data and 
program values in the tabic. If they are both 
normal some flag is set and data-disk saves 
produce a write-pro tec t error. This problem 
could be easily eliminated if I knew one piece 
of information - At what memory location is 
the data table stored? 

I would then sector edit $04 $07 to produce 
normal prologues and epilogues except for one 
byte. I would then sector edit Track $0A, sector 
$BA to replace the words ' 'plea.se wait.... " with 
a poke to the table in mcmoiy to insert the one 
program table byte not yet normal. This would 
cause die utility program to normalize the 
program bytes just before the data is saved to 
die sotlkeyed disk and yet would allow the word 
processor to find the program and data disk 
bytes incompatible as expected. 

In an unrelated matter, in a letter of an earlier 
issue, I read that MECC software softkeys with 
a swap controller. Recently 1 softkeyed eight 
MRCC packages and found it necessary to 
include pokes to do CAleuded retries in tlie read 
routine (as per the Newsroom softkey) as well 
as a poke to ignore unreadable sectors. Without 
those pokes three of the packages could not be 
done. 

Jim Bancroft 
So. Dartmouth. MA 



Ann's Interlude with Karateka 



Dearest Computist: 

Interlude II is an '"adult computer game" 
currendy being sold by mail order. The game 
is protected, but can easily be made 
COPYAablc. The steps to do so are as follows: 

1) Use COPYA to copy both sides of die 
Interlude U disk. 



2) Put the copy of the boot side of the Interlude 
disk into a drive and type the following: 

LOAD HELLO 

UNLOCK HELLO 

2S POKE 36864,96: REM DEFEAT 

DISK CHECK 

SAVE HELIX) 

LOCK HELLO 

Please don't say as you did in issue 
COMPUTlS'l' No. 34 that die Karateka softkey 
and most others can't be performed on the //c. 
1 did it tine using the technique oudincd on page 
6 of COMPUThST No. 26 in R. 0. 
Henderson's letter on deprotecting Dazzle Draw 
on the //c. (There is a typo in hi. s step-by -step 
procedure, however. In step 5 it should read 
"863C;86".) I also had to incorporate Sam 
Wong's suggestion in his letter on page 6 of 
COMPUTIST No. 30. Dazzle Draw too fell to 
the mighty softkcy. 

For those brave adventurers among you whtt 
want to rescue the fair maiden in your spare 
time without devoting too many hours, here's 
a simple cheat for Karateka. Ii presumes you 
have a broken copy of Karateka. 

To modify the ptogram: 

1) Boot DOS 

2) BLOAD KARATEKA 

3) Type in the following code to point the reset 
vector to the monitor: 

2088: A9 59 80 F2 03 A9 FF 8D 
2090: F3 03 A9 5A 3D F4 03 4C 
2098: 0C 02 

4) BSAVE KARATEKA, AS2000,L$5 100 

1) At any time (as long as you haven't been 
killed) pi^.ss CONTROL-RESRT to get into the 
monitor. Then type the following to select a 
segment, enable the language card, and turn 
graphics back on. Type <RIirURN> after each 
item. ,,, ,,. I . 

2) ED 

3) Type a colon, followed by the number of the 
segment (I to 4) you want to Jump to, h'or 

example: 

:3 

ce83 

C«83 

C957 ' '" ~ 

cesft 

At this point you will have the graphics 
screen back and won't be able to sec what you 
typed. 

F628G 

As always, !j>ve 
Ann Onymous 
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It's Certificate Maker! 



Being a very new subscriber to your 
magaj:iiie I just warned Icj write and say thai it 
is great. I only wish tliat 1 tiad started my 
subscription several years ago when you 
publication first started coming out. I couid have 
saved myself many long hours of work 
dcprotecting some of the programs which I have 
done. 

Upon receiving my first issue. COMPUTIST 
No. 33, I sat down and read the entire 
magazine. I enjoyed the softkeys the most bui 
the other areas were very informative. Keep up 
the great work. 

Now on to the real reasons for this letter. 
First, i have just received the program 
Certificate Maker, from Springboard, and 
found it to be ProDOS. As I have a Franklin 
Ace 1200 it annoyed me. The Franklin user:; 
in the world mu.it modity ProDOS programs 
to get them to work. As 1 did not want to modify 
the original 1 decided 1 would make a backup 
and modify it I was not surprised that the 
backup did not work because the normal disk 
copy (Copy ][ Plus) had a read error on track 
S22, side A. 1 then set out to find the routing 
which did tlie suspected nibble count. Not being 
very good at keeping good notes on what 1 am 
doing, I cat! not give the full details of all the 
boot trace work that it required. It is somewhat 
boring anyway (I am sure that some will 
disagree with this because they like details) and 
it is the end result ihat counts. Willi ihe program 
in memory the code at $7DE I was 20 AC S2 
or JSR $82 AC. By placing three EAs there the 
program worked fine. I then used the sector 
editor of Copy 11+ 6.0 program to find this 
code on the disk. 1 found it on track $03 sector 
$Gf0 bytes $71, $72, and $73 on side A of the 
program disk. After making the EA changes 
and writing back to the disk everything worked 
fine. The other sides of this program disk copied 
just fine using Copy U+ 6.0. 

Keep up with the great magazine. 

William B. Beach 
Warminster, PA 



Pacman Goodies 



In COMPUTIST No. 27. Terry Yancey 
asked if anybody knew how to get to the "'Rank 
or Canoon" message in Pacman. 1 have found 
out how to gel to this option, plus one tliat 
allows you to play the game in ' 'Black & While 



or Color. " Here is an easy 4-step way to do it: 

1) BLOAD a cracked Pacman program. 

2) Get into the monitor and change locations 
$1144 through 1146 from 4C 17 42 to EA's. 

CALL -151 
1114:EA EA EA 

3) While in the monitor, also Change locations 
$1821 through $1823 from 4C A6 48 to EA's. 

1821:EA EA EA 

4) Now re-save the modified Pacman. 
BSAVE PAC-MAN, A$l»ee, L$6Ae« 

Now, when you ORUN Pacman, you will see 
the question: "Black & White or Color? 
(B/C)." Just press "B" or "C." You should 
then be al the "Keyboard or Joysllck" prompt. 
Press the usual 1 or 2 to select the control you 
wish. After hitting the appropriate key, you 
should be in the "Attract"" mode. Press space 
to exit. 

Finally, you should see the "Rank or 
Cartoon?" message. Rank is the level of play 
you will start al and cartoon is an option to see 
the intermission cartoons. To choose one. just 
type "R" or "C" and return, dien press a 
number key and return. 

Glen Talbot 
Hampton, IL 



Unbootabie Copy Cards? 

t recently was talking to a friend about copy 
protection and he mentioned to me something 
I had never heard before. He said that some 
companies are using a routine to check for a 
copy card in your computer and then not boot 
if it finds one. Even though I do not own one. 
T thought the idea was rather simple and was 
surprised someone had not thought of it before. 
Am 1 behind the times or have you not heard 
of this type of protection? 

Also, back in COMPUTIST No. 33, I saw 
the softkey for Thief and was stunned when I 
saw the grapiiics on the accompanying pages. 
The graphics were from ''Heist", by Microlab. 
I liave seen the game Thief and die graphics are 
much different. 

Neal Jhala 
Concord. CA 
Mr, Jhala; W}iih' ii i\ true in theory that a 
rowine could check for a copy card, mosi (aboui 
98%) of them are designed ifx such a manner 
char it is impossible to detect their presence. 

in checking with our iayoui deparimem, it 
appears as if they goofed on the Thief softkey. 
'Die graphics are indeed from Heist. Oh Well! 



Most 



Wanted 

List 

Need help 

backing-up a particularly 

stubborn program? 

S«nd us [he name of the program and its 
manufacturer and we'll add it to our Most 
Wanted List, a column (updated each issue) 

which helps to keep COMPLiTIST readers 
informed of tiit proyrams for which soltkav5 
are MOST needed. Send your requests to; 

COMPUTLST 

Wanted List 

POBox Ii0846-K 

Tacoma, WA 98411 

[f you know how to deprotect 

unlock, or modify 

any of the programs below, 

lei us know. You'll bn h|j|pinij your (hIIow 
COMPUTIST taadaiE. j.nd eamt.ig MONEY 
at the same time. Send the information to 
us in article form on a DOS 3.3 diskette. 

Appk Bwijnesij Gr&p))ic* Appte Computer 

Vtslblcnd Mierolab 

(■utenhiii^ Jr. & .Sr. MicrMmntEnn t.TD 

Kriuit^ ft^itter PrimBSOfl Corp. 

Tlie Handlers Silicon Valley SysteniE 

Ttie .Apple's Core: Parts J -3 Ttit^ Professtir 

Fun Biinrh Unicom 

Willy Bjtt .., DalaTiElc 

Snoggk bcuUL-ibmiil 

ABM Muse 

.'Vgeni U.S.A. Schotasiic 

ELindlruppin^ .S^'stcm Sports Judge 

Utiiii Odesia 

Mabers \latisJou Danmosi 

Brain Bank The Obsevatory 

Crimson Crown Penguin 

Crypl iif Mediu Sir Tki;!] 

The Works First Ssar Software 

Cross Clues Science t^e^earch 

Peeping Tom Microlab 

Jigsaw Micro tun 

Miner 2S49er n Microliin 

Create with Garfield DLI^ 

Prim Master Unision World 

Bandits Siritis. Software 

Hmik Strict Fil^r BnHit:rLiLiiid 

Operation Frog Scliolastii; Software 

Work force 1| Core Concepts 

Super Boulder Dash Electronic Ans 

Zorro Daia.soft 

ifoonics UataiuJl 
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readers' lofftkey A copy exchange 



Larry Rondo's soJJkey for. 



Discovery! 



MiUikfii Piibliiiihig Company 

Um Remirch Blvd. 

FOB 21579 

St. Louis. MO 6n32-&579 

Requirements: 

System Master (COPYA) 
Any Sector Editor 

Discovery (the seicnlific reasoning software) 
is an educational game, it is six sides, five of 
wliich contain two educational type games eacli. 
It lias 1ft problems tit all plus a tutorial. The 
games consist of mind boggling, problem 
solving and others that will keep students busy 
for hours. 

The Protection 

Using COPYA did not work, so I disabled 
DOS's read error checking routine (B942:18) 
and successfully convened the disk to a readable 
format- I booted Disk I (the disk.? are self 
bootable) and the program read in a little bit 
of data on Track .$M but then started grinding. 
The grinding gave mc an indication that the 
program was looking for something it did not 
fmd. I set up a boot trace. Tracing through the 
hoot code I noticed that one of the epilogue 
bytes was off by one {DV AA EB opposed to 
I he normal DE A A EB) this was on track 0, 
sector 2. t noted where it was so that it could 
be patched later since 1 had a hunch they 
changed some more, which they did. On track 
4), sector .1 the same thing was done hut this time 
two epilogue bytes were modified. No problem, 
I got up my sector editor and changed the 
modified epilogue bytes to what they should be 
DE instead of DE. No other occurance of this 
type of protection was around so I booted up 
and the program read in sotne more data but 
suddenly the drive rebooted. Hmm, a nibble 
coimt! 

Indeed there was. I replaced the JMP $C60O 
(reboot routine) to a JMP $FF59 (jump to 
monitor) so that when 1 booted up the program 
it would bleak into the monitor and all the code 
would be intact, i examined the aide especially 
around tlie S9B0C area. Since the JMP SC60O 
was not too far away, the nibble count had to 
be before this jump. A few bytes before the 
JMP SC6M was a JMP S9D84. I took a trivial 
guess thinking that this was the nibble count so 
I did a 9DS4G. the drive turned on and the 
program worked fine. Great, I'm another step 
hirther. all that had to be done was find the 
nibble count and do something trivial like 



replace it with the JMP $9D84, The code 
around $9B00-FF (track 0, sector 0A) looked 
pretty atrange so I tbllowed each routine. At 
%mm was a JMP SAD99. Examining this 
routine I found thl it went to the SC60O, I did 
a AD99G and the drive rebooted, t replaced it 
with the $9D84, did a 9BMG and the program 
loaded in and worked tine. 

Step by Step 

1) Boot normal DOS 3.3 

1) Enter the monitor and Disable DOS's read 
error checking routine so that it will ignore the 
different epiloges. 

CALL-151 
B942:18 

3) Use COPYA to copy disks 1 -5 (Disk 6, the 
Manager disk, is unprotected), 

4) Get out your sector editor and inaJke the 
following changes to all the .sides you just 
copied (they use the same exact protection). 

Track Sector Byte From To 



$00 


$32 


9E 


DF 


DE 


S00 


$03 


35 


DP 


DE 


$00 


$03 


91 


DF 


DE 


S00 


I0A 


09 


99 


84 


$00 


$0A 


10 


AD 


9D 



5) Write it back out. 



Dave Stanton 's softkey for. . . 



The M-ss-ng L-nks 

series 



Sunburst Communications 

39 Washington Avenue 
Pleasantvilk. NY 10570 ;/,, 

Requirements: 

A way to Reset into the monitor, or 

128K lie or He with Xfer. boot/Restore- 
Original version of M-SS-NG L-NKS 
Super lOB 1 .5 
Blank Disks ' 

Computing educators soon learn to recognize 
the software publishers that consistently 
produce sound educational software. One of 
those companies is Sunburst Communications, 
and their "Missing Links" series proves the 
point. 

Each disk in the series provides a variety of 
reading comprehension segments which are 
presented with selected letters omitted, The 



student must use the letters provided to fill in 
the blanks based on his knowledge of sentence 
structure and spelling principles. The skill level 
can be adjusted to be challenging for ages nine 
to niiiety, 

Sunbunst deserves credit for its liberal backup 
policy, its willingness to discount lab packs, and 
its offering of nctworkablc versions of its 
software. 

Still, there are many legitimate reasons to 
create a softkeyed version of the "Missing 
Links" disks. Alter following this procedure, 
for example, you will be able to modify the 
reading selections to make them easier or more 
difficult. Enrthermore, you will not be 
inconvenienced in the event that your originals 
suffer damage. 

The Prolettion 

Using a nibble editor to analyze the disk's 
raw nibbles reveals many changes to standard 
DOS formatting. The address prologues are D5 
AA XX. where the value of the third byte is 
different on each track. The data prologues are 
similarly non-standard. Instead of (he expected 
FF sync bytes, you'll find an unpredictable 
collection of values. Furthermore, these strange 
sync bytes cause confusion when you try to 
detcnninc the data epilogues. 

AJl things considered, capturing the disk's 
RWTS seems the most prudent approach to 
deprotection. 

The Softkey 

1) INIT a blank disk, 
INITLOGO 

2a) If you have u copy card or other way to 
break into the montor, boot the original disk 
and allow it to continue loading files until it 
stops and waits for keyboard input. Then stop 
the program and move the RWTS to a safe area. 

19ee<B8M.BFFFM 

Now boot a 48K slave disk with no HELLO 
program and skip to step 6. 

2b) If you have 128K, boot DOS 3.3 and load 
XFER.BOOr. 

PR#6 

BLOAD XFER .BOOT 

3) Insert the original "Missing Links" disk, and 
boot it into your extended S0 column card. 

PR#3 
CALL m 

4) Allow the disk to continue loading files until 
the drive stops and waits for keyboard input. 
Hit Resel and go into the monitor to iietivate 
RESTORE. 

CALL -151 

3F8:4Cee«3 

BLOAD RESTORE '.: 
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readers' sofftlc ey & copy exchange 



5) Move the trapped RWTS from the 80 column 
card down to a safe location In the main 64K- 

199»<B8«fl.BFFFBYl 

6) Siive ihc prolcL-led RWTS on the same disk 
fha( holds Super lOB ).5. 

BSAVE RWTS.ML,A$19fl9,L$89» 

7) Load Super lOB 1 .5 and insert the modified 
swap controller at the end of this article. RUN 
to make yomcnpy from the original onto your 
already initialized baekup disk. 

Now that you liavo a completely depriotected 
version of ' "Missing Links" , you may wish to 
add a faster operating system or change the 
itterature text tiles lo something of your own 
choosing. Doing so will require nothing more 
than a word processing program that accepts 
staiidaid lexi files. Just be careful to maintain 
the text file format that the original uses. 
Imagine the possibtlites! 

controller 

1036 REM MISSING LINKS CONTROLLER 

10!0TK = 3 :LT = 35 :ST = 16 :LS = 15 :CD=m :FAST 

= 1 
1020 GOSUB 3G0 ; GOSUB 490 ; GOSUB 610 
1030 GOSUB 360 : GOSUB 490 : GOSUB 610 : IF PEEK 

(TRK) = LTTHEN 1050 
1040 TK^ PEEK (TRK) :ST-PEEK (SCT ) : GOTO 1020 
1050 HOME ■ PRIMT "COPY' DOtjei" ■ END 
10010PRIflTCHR$(4): "BLOAD'Rm"S.ML.A$1900" 



controller checksums 



1000 - S356B 

1010 - $2445 

102G - $C908 

im - $FB9C 



- $0D4F 
1050 - JE40C 
10010 - S8BE2 



Edward Hauff's softkey for. 



i 



Donald Duck's 
Playground 



Sierra On-Line 

Requirements: 

Apple ][ 

COPYA or fast copier 

Sector editor 

A blank disk 

Donald Duck's Playground 

Donald Duck's Playground, being a 
children's program, should be unprotected for 
irtultiple backups. No child is willing to wait 



for several weeks for a new disk to arrive after 
they have opened the disk jacket to find out 
where Donald Duck is hiding. Fortunately for 
us, On-Line has provided this disk in a near 
DOS 3,3 format with only a nibble count tor 
protection. When the disk is copied it boots and 
everything rans fine until you turn the disk over. 
This is when the nibble count routine is invoked 
to check for the original. Stopping the routine 
at just the right moment is imperative as the 
program first checks to see if the disk has been 
ttirned over. If so, it calU the nibble routine and 
if that fails then the program will crash. After 
several tries with my trusty Kcplay 11 card 1 was 
able to find the nibble count in high memory 
hidden way back in the $FF0O page. Tricky, 
real tricky, but not quite tricky enough. By 
scanning this area, which by all rights and 
means should have been ROM, we will find the 
start of the nibble count at JFFO?, Because the 
nibble count is only invoked after the program 
checks to be sure the disk has been turned over 
we must examine the code which does thi.s 
cheek to see how it calls the nibble count. To 
do this we simply do not turn the disk over when 
the program asks. Press any key, and the cheek 
is made for the back, which of course fails. 
Next we try to catch this routine in action with 
our Replay card, where we will find a friendly 
JSR (Jump SubRoutine) to the nibble count. 
Armed with this information and a sector editor 
we search the disk for $20 C7 FF which we will 
just NOP with three $EAs. Our effort is 
rewarded at turnover time with an operational 
and unprotcted disk- 
Here it is, short and sweet: 

1) Copy the disk with COPYA or a fast copy 
program. 

2) Search the disk for $20 07 FF. Mine was 
on track 3, sector 8, byte $2 A. 

3) Change the $20 07 FF to SEA EA EA. Write 
the sector back lo the disk, 

4) Ail done. Have fun. 



Marc Batchelor's revisited softkey for. , 
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Mastering The SAT 



CBS Software 

One Fawcett Place 

Greenwich, CT 06836 

S150.0fl 

Requirements: 

Apple ][ Plus, //e or clone 
Whole disk copier that ignores errors 
Four blank disks 
Sector editor 



Ths softkey for "Mastering the SAT" that 
was published in COMPU'l'lSf No, 30 was 
unfortunately not very complete. First of all, 
the author failed to accomplish some things, 
while at the same time, he overlooked others. 
On page eight, the author states that ' 'Tracks 
S03 and $M have been written in a strange 
format." He also states that "The [Super tOBj 
controller copie.5 tracks .1105 -.'S22 ... Use the 
same procedure on the other disks." Well, 
while it is true that on sides 1 and 2. tracks .3 
and 4 have been foimalled in some non-standard 
way, here is where the author made the mistake 
of assuming too much. He assumed that on sides 

3 and 4, the same tracks were formatted the 
same way. Wrong. Only track 3 on side^ 3 and 

4 were formatted strangely. On track 4 of side 
3, you will finil 4 text files. They 
are READER 3, 4, 5, and 6. On track 4 of 
side 4 you will find the text files named 
V2SK1LL5 and GR98. If you use the audiors' 
softkey, you will lose a total of six text files, 

1 then realized that if I wanted to examine 
the contents of the files on my disks, I had to 
POKE things into memory, namely POKE 
44033,21. LOAD the file, restore 44033 to a 
17, and then examine the file. The softkey 
outlined by the author didn't take care of this 
inconvenience. 

Two other things 1 found unsatisfactory were 
that when tlie Reset key is pressed from within 
the program it re-boots, and when I LIST the 
HELLO program, line zero cont.iined some 
control characters which unless bypassed, will 
clear memory. 

The softkey I will present here will solve all 
of the problems 1 have listed above and also 
make it readily available for installation on a 
hard disk. 

The Softkey 

My first problem was deciding what program 
to copy the originals with, I finally chose 
Locksmith last copy to copy all four sides and 
ignore all errojs. At this point, Mastering the 
SAT was in a COPYAable format. However, 
this sfiU wasn't the format I wanted, I wanted 
hastle-free access to the programs. 

I then went to track $15. sector $00 to 
examine its VTOC. This VTOC appeared 
perfectly normal, with the exception that it 
showed ail tracks and sectors a.*; being used. The 
VTOC even pointed to track SU, sector S0F 
as the first entry of the CATALOG which is 
the normal place for it. The normal place for 
the VTOC is track $11, sector S00. So 1 read 
in that sector to see what Mastering the SAT 
was storing where the VTOC should be, I was 
very happy to see that the entire sector was 
zeros, I therefore, read the VTOC from track 
$15, sector $00 and wrote it where it i.s 
supposed to go. 

Putting a normal DOS on the disks then 
•yielded a completely unprotected backup. 
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Futher examination revealed Ihal this progetlure 
warked for all four sides. 

I then eliminated tlie last inconviences by 
LOADing the HELLO file from the unpmtficted 
copy and first typing "0" [RETURN] to 
eliminate the codes that clear memory and 
secondly removing the "POKE 19U,xxx : 
POKE 10 12. XXX ; POKE 214,255" from the 
program. This needed to be done to all of the 
disks. 

Using u faal DOS produced a completely 
deprotected disk that boots about twice as fast 
as the original disk. 

Step by Step 

1) Initialize four disk sides (preferably with a 
fast DOS) with the boot filename of HELLO. 

INIT HELLO 

2) Use a disk copier timt ignores errors to copy 
tracks $3 - S22 of all four sides of Mastering 
the SAT, If you are using Locksinidi Fast Copy 
you need to use the following keystroke."; to tell 
it to start at track $3. 

3) Use your sector editor to read track S15, 
sector S00 and write it to track .$1 1 , sector $00 
of all four sides. 

4) Rtimove the offending lines (lines 2-4) from 
the HELLO files of the four sides. In addition 
to the following commands, you should delete 
any command.^ from lines 2 through 4 which 
are similar to "POKE I011,)(xx : POKE 
lfl!2,xxx : POKE 214,255" 

LOAD HELLO 

9 (remove POKE sequences) 
SAVE HELLO 

That's all. Enjoy freshly deprotected 
diskettes, I must add diat without the knowledge 
that there was no call for a nibble count 
(information supplied bv Danny Pollak 
COMPUTIST No, 30), 'l might slill be 
searching the disk for some code that tries to 
read tracks $3 and $4. Thanks for doing a lot 
of the leg work tOr the softkey, Danny. ^^ 

A 

Marc Balchelor's so, 
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Copy 11 Plus 4.4C 



Requirements: 

A blank disk 

Copy [I Plus 4.4C 

A disk searcher and sector editor 

A way to break into the monitor 

In an earlier issue of COMPUTIST, (Issue 
No, 11). Dr. Phillip Romine stated that Copy 



II Plus 4.4C will copy itself with parameters 
left at their default settings' ' , .Such was not the 
case with my copy of 4.4C'. As a matter of fact, 
the parameters that were supplied with my 
version of CII+ 4,3 would not work on my 
4.4C either. However, setting parameter 3A = 
2 enabled me to make a copy. This worked well 
until my brother bought a hard disk from First 
Class Peripherals. He wanted to see if he could 
put CII+ 4.4C on his Sider hard disk. Well, 
needless to say, he was unsuccessful, leaving 
me to develop this softkey, 

The procedure consists of capturing the utility 
pan of the program, booting a slave disk and 
patching the utility program to restore itself 
when it i,s RRUNed Then the bit copier is 
captured, ihe slave disk is rebooted, a small 
patch is made to the bit copier (to shut off the 
drive), and ihe program is saved. 

In cookbook form: 

1) Boot DOS 3.3 or your favorite fast DOS, 
PR#6 

2) INITialize a blank disk with an empty 
HELLO program. 

FP 

INTT HELLO 

3) Boot your Copy II Plus 4,4C disk. 

4) When the boot is completed, reset into the 
monitor by your favorite method. 

5) Move die memory at $806-900 and SB000 
BFFF to a safe place. 

6flft»<8»«,99eM 
4C»(»-iBBB».BFFFM 

6) Boot the slave disk you made at the start 

6 fBPl 

7) Enter tire monitor and add a routine to move 
the memory back at run time. ■ 

CALL-151 

89«<6»»e.6eFFTVI 

82B:A9 M 85 0« 85 »2 A9 4C 

833:85 ei A9 B* 85 83 A* 98 

83B:iH m 91 92 C8 Dfl F9 E6 

843:81 E6 83 A5 91 C9 5C D» 

84B:EF A9 6» 8D FF 82 

8) Save the utility portion of the program onto 
the slave disk, 

BSAVE Cn+ 4.4C IJTn.ITY, 
A$82B,L$53FB 

9) Now to get the bit copy portion of Ihe 
program, Stan by rebooting Copy II Plus 4.4C 
again, 

6 BP] 

10) Select '"Bit Copy" from the main menu. 
When the drive stops again, break itito the 
monitor. 



11) Move the code at $800-900 to a safe place, 

12) Boot the slave disk. | 

6 BP] ' 

13) Enter the monitor and make a patch to the 
bit copier, 

CALL-151 

8ft»<68W.6eFrM 

8»8:A9 6B KD FF 82 4C 80 89 

14) Save the bit copier to the slave disk. 

BSAVE CII+ 4.4C BIT COPY, 
A$888,L$2AFB 

15) Boot your sector editor/disk searcher. We 
will make a patch to the utility program so that 
selecting the hit copier will put you in the 
monitor instead, 

16) Scan the slave disk for the sequence $BD 
89 C0 A9 00. 

17) Count 3 bytes backward from the byte SBD 
and type: 

2C E8 Ce 4C 59 FF 

18) Write the sector back to the disk. 

19) You may wish to create a Hello program 
on the disk to select which part of Copy II Plus 
you want to use. 

Congratulations. Ton arc now the proud 
owner of a version of Copy II Plus 4.4C that 
can be run from a hard disk. 



Mike iMtiden 's softkey for. 



i 



Master of the Lamps 



Aaivision, Inc. , 

2350 Buysh'jre Frunta^e Rd. 
Mountain View, CA 94043 

Requirements: 

A fast copier 
A sector editor 

The Procedure: 

1) Copy Master of the Lan^s to a blank disk 
using and fast copier. 

2) Use your sector editor to change track $00, 
sector $0B. bytes $25-29, to A9 FF 4C 6A Al . 

That's it... 

i 
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Blaine Gardner's sojtkey for. 



One on One 



Elecnonic Arts 

2755 Campus Drive 

San Mateo. CA 944S.1 

Requfrements: 

Appk- J[ 
Super lOR 1 .5 
A blank disk 

A soflkey for One on One wai printed in 
COMPUTIST No. 13. bui it didn't work on my 
version, which was purchased last month. 

After some tinkering I discovered that its 
protection is similar to Arch on II. which was 
covered in COMPUTIST No, 24, The nibble 
count is on tracks 5 & G, and the data markers 
arc the same (D5 BB CF), but the sector edits 
for the nibble couni routine didn't work. 

Instead of trying to do all of the work myself, 
I tried a trick which I recently discovered: the 
Copy II Plus parm file! For example, I copied 
Financial Cookbook with the Auto Bit Copy 
option, and wa.s quite surprised that my copy 
was now deprotected!! Examining the parm file 
for Financial Cookbook showed that it was a 
normal copy combined with a sector edit that 
disabled the nibble count. 

It wasn't that easy for One on One because 
of die altered data markets. But, combining the 
sector edits from Copy II Plus (6,0) with the 
controller foi Archou II provided a simple and 
painless method of de protecting One on One. 

I have looked through several of Copy IT 
Plus' parm files, and if the disk is protected with 
a nibble cotmt Copy 11 Plu.s stands a pretty good 
chance of cracking it, "Vou may have lo 
normalize the DOS, but that is usually the easy 
part. If you're having a tough time tracking 
down a nibble count routine, give Copy n Plus 
a try. Il can iiave an awM lot of work! 

To softkey the newest version of One on One, 
simply install this comioller in Super lOB 1.5 
and run h as usual. 



controller 

(REM ONE ON ONE {NEW VERSION) 
1010TK = ST = :LT = 35 CD^WR 
1 020 T 1 = TK ■ GOSUE 490 : I F TK > 3 THEN RESTORE 

, GOSUB 210 
1030 60SUB 430 'GOSUB 100 :ST = ST + 1 : IFST< 

DOS THEN 1030 
1035 IFTK=2THEMGOSaB210 
1040 IF SF THEN 1060 



1050ST = 0:TK = TK 


+ 1 + (TK = 4 ) * 2 . 


LT THEN 1030 


10G0 GOSUB 3 10: GOSUB 230: GOSUB 490 


.ST = 


1070 GOSUB 430; GOSUB 100; ST = ST +1 


DOS THEN 1070 


10e0ST = 0;TK = TK + l + (TK = 4) >!■ 2 


AND TKUT THEN 1070 


1090 IFTK":LTTHeN 1020 


1100 HOME 'PRINT "DONE" WITH" COPV" 


5000 DATA 213 ,187.207 


5010 DATA 13" CHANGES 


5020 DATA 2 ,3 ,71 ,170 


5030 DATA 2 ,3 ,81 ,173 


6040 DATA 1 ,6 .8 ,98 


5050 DATA 12 ,4 ,0,160 


5060 DATA 12 .4,1,-3 


5070 DATA 12 ,4 ,2 


162 


5080 DATA 12 ,4 ,3 


255 


5090 DATA 12 ,4 ,4 


159 


5100DATA12 ,4 ,5 


9 


5110 DATA 12 ,4 ,6 


24 


5120DATA12 ,4 ,7 


95 


5130 DATA 12 ,4 ,8 


4 


5140 DATA 12 ,4 ,9 


30 



IF TK < 



:TK = T! 



IFST< 



IF BF 



END 



1090 - $4CD7 

il0e - $00A8 

5000 - S8E56 

5010 - $FCA3 



5120 " S923A 
5130 - S1506 
5140 - S5143 



Will Knight's softkey for.. 



a 



Bridge Baron 



controller checksums 



1000 


- J356B 


5020 


- IF9DD 


1010 


- $3256 


5030 


- $D9AF 


1020 


- J2EE7 


5040 


- $5280 


1030 


- t3S6e 


5050 


- $CB13 


1035 


- $7B0B 


5060 


- $C770 


1040 


- $2680 


5070 


- $ecFc 


1050 


- 17275 


5080 


- IF823 


1060 


- J0803 


5090 


- $9CD3 


1070 


- J0006 


5100 


- $0580 


1080 


- $3D0D 


5U0 


- $EC96 



Great Game Products 

P.O. Box 76 

Cabin John, MD 2mi&-m76 

Requirements: 

Bridge Baron 
64K RAM 
Super lOB 1.5 
A blank disk 

Bridge Baron is, hands tiown, the best bridge 
program available for the Apple. Bidding 
supports the mo.st common conventions and 
play of the hand is not too bad cither {don't 
expect to see a Vienna coup, though!). I paid 
over $50 for the program; software this 
expensive MUST he backed up. Bit copiers 
wouldn't touch It - not even the highly touttjtl 
(and priced) Echo Plus. However, the 
appearance of an Applesoft prompt during the 
boot was a hopeful .sign. Normally I just slap 
in Super lOB with a swap controller and let 'er 
rip, but that also failed. Upon examining the 




"The directions said to enter the monitor' 
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RWrS 1 found it so modifitd that Super lOB 
appeared doomefl. $B8fl0-SB9'i6 war filled with 
PLP's und BRK's and othfjr garbagt;. The 
RWTS appeared to start at IEB957, but "swapping 
it with thai address start in lieu of $B80O was 
to no avail. 

After a while, I noticed that Bridge Baron's 
prol<;t.lion ItKjked a lot like Moebius, su I tried 
the softkey for that program which appeared in 
COMPUTIST No. il. When applied to Bridge 
Baron it worked fine; I didn't even have to make 
any sector edits since Bridge Baron never writes 
to the disk. The take-home lesson here is that 
not only can you deproteci different programs 
from the same company with the same method, 
since copy protection is often marketed to 
several publishers, you can also sometimes 
deproteet programs from different companies 
with one tneihod. 

Step by Step 

1) InitiaJiKC a disk with a DOS of your choice: 

INIT BRroCE BARON 1«/15/8S 

2) Run Super lOB 1 .5 with the controller for 
ULTIMA rV (COMPUTIST No. 28, pg. 10) 
using the disk prepared in step 1 as the 
destination. Note: the POKE 47829, 13 in line 
1060 of the controller should be POKE 47829. 
213 as pointed out in Jeff Rivett's Moebius 
softkey , 

Finally, a partner ihat won't pass your 
jumpshifts! Enjoy. 

■ i 

Phil Goetz ' softkey for. . . 




Broderbund Software , 

17 Paul Drive 

Sun Ru/cH-t, CA 94903 

Requirementst _ 

A way to reset into the monitor " 

A 48K slave disk with no HELLO 
An INITialized, double sided blank disk 
COPYA 

The AE disk has two sides: the boot side and 
the scenario side. Only the boot side is 
protected To unlock AE, we will save the boot 
program as a file. 

Install an old F8 ROM or some other means 
of resetting into the monitor. Boot AE, press 
space, and wait for it to tell you to TURN THE 
DISKETTE OVER AND PRESS SPACE. 
Then stop the program. Enter the following 
from the monitor: 



2fll'7<71'7.8FFM 

22fle<8.FFM 

23W»<8Bee.A7FFM 

28»e:Ae m A9 D4 99 flft A8 C8 

2ees:i>e fa ee 06 20 ad u 20 

Hil9:C9 Ce De EE A9 tl B9 m 
2198;29 99 »» 97 C8 D» F7 EE 

2020:18 20 EE IB 20 AD IB 20 
2028:C9 09 D0 EA A0 00 B9 00 

2030:22 99 00 00 C8 D0 F7 A0 
2038:00 B9 00 23 99 00 88 C8 

204»:D0 F7 EE 3B 20 EE 3E 20 
2048:AD 3E 20 C9 AS D0 EA A6 
2050:00 AD 50 C0 AD 57 C0 AD 
2058:54 C0 AD 52 C0 20 9.1 FE 
2060:20 89 FE 4C 00 90 

2080: A9 00 8D F4 B7 8D EB B7 
2»88:8D EC W 8D FS R? 8D F3 
2090:B7 20 EJ 03 20 B5 B7 4C 
2098:00 20 

This disassembles to 



2000- LDV 
2002- LDA 
2004- STA 

2007- I NY 

2008- BNE 
200A- INC 
200D- LDA 
2010- CMP 
2012- BNE 
2014 LDV 
2016- LDA 
2019- STA 
201C- I NY 
20 ID- BNE 
20 IF- INC 
2022- INC 
2025- LDA 
202S- CMP 
202A- BNE 
202C- LDY 
202E- LDA 
2031- STA 

2034- I NY 

2035- BNE 
2037- LDY 

2039- LDA 
203C- STA 
203 F- I NY 

2040- BNE 
2042- INC 
2045- INC 
2048- LDA 
204B- CMP 
234D- BNE 
204F- LDX 
2051- LDA 
2054- LDA 
2057- LDA 
206A- LDA 
205D- JSR 



#S00 

am 

$A800,Y Fill memory with SD4 

S2004 
.$2006 
12006 

am 

J2002 

BIF7 

$2000, r 

$0700, V 7F7<20F7,21FFM 

S2016 
S2013 
$201B 
S201B 

am 

12016 

mm 

$2203, y 

S0000.V 0<22fl0.22FFM 

$202£ 

S$00 

S2300.Y 

saB00.Y Move 8600. A7FF back 

S2039 
S203B 
$203E 
S203E 

#$Aa 

$2039 

$00 

$C050 

$C057 HGR 

$C054 

$C052 

$FE93 Disconnect DOS 



2060- 


JSfi 


$FE89 


11 M 


2063- 


JMP 


59000 


Start AE 


2080- 


LDA 


#100 




2082- 


STA 


$B7F4 


Ssei( 


2085- 


STA 


$B7EB 


Vo 1 ume 


2088- 


STA 


$B7EC 


Track 


2088- 


STA 


$B7F5 


Clear error flag 


208E- 


STA 


$B7F3 


Byte count 


2091- 


JSR 


I03E3 


Set up for RWTS 


2094- 


JSR 


$B7B5 


RWTS 


2097- 


JMP 


$2000 


Memory moves (above) 



Note that the first thing this boot program 
does is move the drive head to track 0. This 
is the cleverest part of the protection on AB; 
loading the protected boot program leaves the 
head on track 0, and when you flip to the 
scenario disk, the head must still be on track 
to run. Now hoot a disk with no hello program 
or a very short one, and enter the following: 

CALL-IS I 

8FD:4C 80 20 

A964:FF 

BSAVE AE,A$8FD,L$8210 

(A964:FF lets you save long files) 

Now, when yotiBRUNAE, Instead of asking 
you to ■ TURN THE DISKKITE OVER AND 
PRESS SPACE" the screen will switch to hi- 
res, rum the disk over and press the space bar 
anyway. 



Larry Rando 's softkey for. 



i 



Great American 

Cross-Country 

Road Race 



Activisioii, Inc. 
2350 Bay shore Frontage Rd. 
Mountain View, CA 94043 



Reqitirements: 

COPYA 

A sector editor 



The Protection 

After copying the disk with a fast copier, I 
booted up and got as far as the Ac ti vision logo 
(The loading process is very long and takes a 
while). After displaying the logo the drive 
started recalibrating in an endless loop. It 
seemed it wa,'! looking for something il could 
not find. After some time boot tracing I came 
across a funny disk-read rouline(s) which I 
found caused the disk drive recalihration. 
Besides the abnormal disk read routine (which 
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was almost haJf a sector long), the program did 
a checksum of the bytes. If it did not add up 
to $FC, it would of course crash. To correct 
it I had to NOP out all of $C2-$FF which had 
nothing to do with the boot process, although 
it was covered up nicely to loop legitimately. 
Finally, 1 changed the byte that contained the 
final checksum of the routine (from VC to FF). 

The Procedure 

1) Copy the disk with any fast copier, 

2) Start up your favorite sector editor and make 
the following changes; 

Track 0, Sector JA: 
Change bytes JC2-$FF all ia EAs. 



Jim Hart's softkey far.. 



Track 0, Sector $B: 
Byte From 



To 



im 


38 


EA 


S01 


2A 


£A 


m 


25 


A9 


S03 


FC 


FF 



Dan Agnew's softkey far,.. 
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Computer Preparation 
for the SAT 



Harcourt. Jovanivich, Brace 

Requirements: 

COFYA 

A sector editor 

Computer Pieparation for the SAT is a very 
gotjd preparation program. There's only one 
problem: it's copy -protected , making the 
loading time very slow. 

The proceduie to make a COPYAable 
version is as follows: 

i) Defeat DOS' error checking and return to 
BASIC, 

CALL -151 

B942:I8 

3DeG 

2) Now copy each disk with COPY A. 

3) Make the following change to each of the 
COPYAed disks with a sector editor: 

Track Sector Byte Chai5ge To 



$11 J0 J2 t0F 

4) Add some fast DOS or DOS 3.3 to the disks 
and enjoy. 



Castle Wolfenstein 



Muse Software 

347 N. Chark-s Si. 

Baltimore, MD 21201 

Requirements: 

48K or more 

One or more disk drives 

Super JOB l.:5 

A blank disk 

A DOS 3.3 compatible fast DOS (optional) 

Original Castle Wolfenstein disk 

Castle Wolfenstein is one of the classics in 
the computer gaming world. However, on the 
Apple series, it is copy protected, and diis plays 
havoc tor us "Wolfenstein junkies". It takes 
about one month for the disk to wear out (for 
me at least) and sending off for backups from 
Muse takes both time and money. I decided to 
try to deprotect the disk and possibly add a 
quickie DOS to speed diings up a bit. Guess 
what? I succeeded! 

The fii'st tiling I did was use Copy II Plus 
to see which track.^ had valid data on them. 
Hmmmm... it seems all 35 tracks are being 
used. Number two on the IL^t is to look at a raw 
nibble dump and check to see If there are any 
strange prologues or epilogues in either the 
address or data fields. Aha! The addresss 
prologue is changed to U5 DA 96 and the data 
prologue is changed to D5 DA AD. 
Additionally, the checksums seemed to be 
incorrect in seveial data sectors aJso. At this 
point it appeared that 1 could incorporate this 
information into a Super lOB controller to 
deprotect the disk. If you want to sec the 
preliminary results, try the Super lOB controller 
given here with the POKBs to location 47786 
and use it on the Castle Wolfenstein disk. The 
copy seems to be A-OK but just for kicks try 
to CATALOG it. An 1/0 error, you say? 1 was 
stumped at this point. However, looking 
through my back issues of COMPUTIST helped 
yield the solution. In COMPUTIST No. 21, 
there is a softkey for Advanced Blackjack and 
in it Jitn Mitchell describes how a diunge in 
the byte translate tables can foul up a copy. 1 
checked out Ihtr areas in DOS that he mentions 
and sure enough, it is altered on the Wolfenstein 
disk. Incorporating this one change (to location 
47786) into the controller gives a perfectly 
working copy. 



Step by Step 



1) INITialize a blank disk, preferably with a 
fast DOS, using the name HELLO. 



iSi 
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2) Use the controller below with Super lOB 1.5 
to copy the Wolfenstein disk to the newly 
initialized disk. 

3) After your disk has been deprotected, type 
in this little program and sa^ve it to llie copied 
disk under the name HELLO, 

FP 

IB HOME : D$ = (:iIHS(4) 
20 PRINT D$; "BRLW ©INIT" 
SAVE HELLO 

4) You now tiave a COPYAable disk, Hide the 
original and enjoy! 



controller 

100D REM CASTLE KOLFENSTEIN CONTROLLER 
10I0TK = 3 :LT = 35:ST = 15;LS=16 :CD = WR:FAST 

= 1 
1020 RESTORE ; GOSUB 190 ; GOSUB 210 : POKE 47*26 

,24 : POKE 47786 .35 : GOSUB 490 : GOSUB 610 
1030 GOSUB 230 : POKE 47425 .56 : POKE 47786 , 170 

:GOSUB490: GOSUB 610; IFPEEK (IRK ) = LT 

THEN 1050 
1040 TK = PEEK (TRK ) . ST = PEEK (SCT ) , GOTO 1020 
1050HOIi(E : PRINT "COPY' DONE." : END 
50e0DATA213 ,213 ,150 ,213 ,218 .173 



cuntruUer checksums 



1000 - S3 568 

1010 - S2445 

1020 - IF6C6 

1030 - J7FBB 



1040 - S4D6A 
1050 - S363B 
5000 - I1E0C 



■i 



Mike Landen 's softkey for. 



The Luscher Profile 



Mindscape Inc. 

S444 Dundee Rd. 

Nonkbrook. II. ma62 

Requirements: 

COPYA or equivalent 
A sector editor 

1) Copy both sides of Luscher Profile to a blank 
disk using any fast copier. 

2) Use your sector editor to change track SI 2, 
sector S6, bytes $24-S25, from A9 44, to 18 60, 

That's U... 
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Mart: Batchelt/r's softkey for. 




Electronic Am 
.|t 390 Swift Avenue 

South San Francisco, CA 



Requirements: 

Sky fox 
A blunk disk 
Super lOB 1.5 
Sector Eitor 

In COMPUnST No. 17 tpg. 7), Marshall 
Strouse wrote a soRkey for Skyfox from 
Electronic Arts. Unfortunately, tliesoftkey was 
lacking in a couple of aspects. When I used the 
syftkey described in that article, Itie "trap- 
door" to Alpha Invaders was lost. I don't own 
a Muc'kingboard. but I alsu undeiiitand thiit tjuite 
a bit of sound capability was lost. I have a 
different method to remove the copy protection 
that at least leaves Alpha Invaders alone. The 
method uses the Arch on controller from 
COMPUTIST No, 21. 

1) In.stall the controller below into Super lOB 
1,5 and run it on Skyfox. 

2) Get out your sector editor and make the 
following changes to the copy. 

Track Sector Byte Change To 




19aflST = a :TK=TK + 1 + (TK = 4) * 2 : IFBF - 

AND TK<LT THEN 1070 
1090 IF TK<LT THEN 1020 
1100 HOME : PRINT : PRINT "DONE"^ WITH'^ COPY" : 

END 
5000 DATA 213 ,187 .207 
5010 DATA 2^ CHANGES, 2 ,3 ,71 .170,2,3 ,81 ,173 



contrullcr checksums 







________ 







1000 


- $355B 


1060 


- $0803 


SI 


$6 


$30 


S04 




1010 


- $3366 


1070 


- $0006 


S2 


$0 


SAA 


%m 




1020 


- I2E67 


1080 


- $8D0D 


S2 


S3 


S47 


$AA 




1030 


- S3866 


1090 


- S4C07 


$a 


$3 


$51 


$A0 




1035 


- S7B0B 


1100 


- S3107 


$13 


$8 


$69 


$A9 4D 18 


60 


104B 


- $2Bae 


5000 


- $E127 


$13 


$8 


V4 


$BE C5 A7 97 


1050 


- 57275 


5010 


- $161B 



There you have it, Skyfox in a bag. 
Remember to write the sectors back to the disk. 

controller 

1000 REM SKYEOX / ELEC ARTS 
1010 TK = :ST = :LT = 35 :CD = Wfi 
1020T1tTK ;GOSUB490 ; I F TK > 3 THEN RESTORE 

: SOSUB 210 
1030GOSUE430:GOSU8100;ST = ST + 1 : IFST< 

DOS THEN 1030 
1035 IFTK = 2THENGOSUB210 
1040 !F BE THEN 1060 
1050ST = 0.TK = TK^1 + (TK = 4) * 2 . IFTK< 

LT THEN 1030 
1060 GOSUB 310 : GOSUB 230 , GOSUB 490 :TK = Tl 

:ST=0 
1070 GOSUB 430 ; GOSUB 100 :ST = ST 1 1 , I F ST < 

DOS THEN 1070 



Greg Poulos and Jim Hart's softkeyfor, . 



Silent Service 



Requirements: 

Copy program that ignores errors 
Disk Searcher 
Sector Editor 

Silent Service is a submaiine simulation game. 
It has proved to be very easy to deprotect. 
Presented here are two possible methods: 



Procedure #1 

1) Copy the original disk with Locksmith Fast 
Copy (or some other whole disk copier that will 
ignore errors). 

2) Read in track $04, sector $09 with a sector 
editor. ' • 

3) Somewhere around bytes $DO-SEF. you 
should see some text that savs something to the 
effect of "HARDWARE FAILURE". If you 
don't see this text, search the disk for it. 

4) Enter tlve following codes with the first byte 
covering up the "H" in "hardware", 

ee 84 C2 CC CF CI C4 C7 
8D 84 C2 D2 D5 CE CI 8D 

Procedure #2 

1) Copy the original disk with Loeksmith Fast 
Copy (or some other whole disk copier that will 
ignore errors), 

2) Using a di&k, searcher, scan the disk for the 
sequence; 

9A DB 8D M «2 4C AA 92 \9 92 

You should find it somewhere in the file 
"\\". On my disk this is was on track $05, 
sector S09, byte SAA. 

3) Change the last byte in the sequence to a 
SDB. 

4) That's it! Another victory in the dcproiecdwii 
wars. ^_ 

a 
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Jeff Wicker's hints for.. 



Carmen Sandiego 



Whai's that I hear? You say you're tired ot 
looking up places, currency, and landmarks in 
Carmen Sandiego? Well, I've got just the thing 
for you. A little cheat table. On the left side 
of each list is the name, landmark, cte., and 
on the right is the location to go to. 

Currency 

Francs Paris 

Drachmas Athens 

Rubies Moscow 

Lira Istanbul or Rome 

Pounds London 

Pesos Mexico City 

Landmarks 

The Amazon Rio 

The Ganges ...i New Delhi 

The Danube .,..,..*..,,.<....,..,,. Budapest 

The Tigris .r,..iii.V,5.„--. Bagdhad 

Eiffel Tower .,.,,,,....■ Paris 

Mozambique Channel Moroni 

Mt. Popocatepe ti Mexieo City 

Ml, Oiynipus Athens 

Mt. Blanc Paris 

Loch Ness London 

Sikh Temples New Delhi 

Shinto Shrines Tokyo 

United Nations New York 

Louve Paris 

Sahara Bamako 

Big Ben London 

Skyscrapers New York 

Subways New York 

Black Sea Istanbul 

Culture 

Anec Mexico 

Magayar Budapest 

Georgian Moscow 

Etrtiscan Rome 

Byzantine Istanbul 

Sparta Athens 

Bedouins , Cairo 

Sereudip Colombo 

Sumeria Baghdad 

Hitiiie Istanbul 

Saxon London 

IVoducts 

Rice - Colombo 

Marble Rome 

Wine ..vi>„:.iv;v....^...,,M->.^*»' Paris 

Tweed ,., ,,,„,,,,,.,.,.,,.,,....., London 

Whiskey London 

Textiles Paris 



Fashion Paris 

Stamp Buyer San Mat io 

Diamonds Rio 

Gorilla Kigali 



Helpful Hints 

A robber never {at least in any of my games) 
goes back to a location where he/she has been 
befoie during the course of that game. When 
you first Stan to investigate go to all three places 
in your investigating option until you have 
gathered three or four pieces of information to 
plug into the interpool. It is very important to 
get a warrant as soon as possible. 

After this is done, the cheat sheet becomes 
most handy because you may then ^ip from 
pl.^ce to place until you find the suspect , After 
traveling to a location, if your first investigation 
result.s in a rejection travel hack to the place 
where you just left and try going somewhere 
else. Good luck! 



i 



Danny PoUak's softkey for... 



Echo Plus 



Agramit System.'; 

J0 IVinihrop Circle 

Weaon, MA 02193 

$59.95 

Requirements: 

Apple If Plus or equivalent 

Echo Plus 

A way to enter the monitor (see article) 

INITialized disk with tio HELLO program 

Echo Plus is one of the newest copy programs 
to hit the market. There are no parameters to 
change, aldiough it helps to know which tracks 
to copy. The automatic disk copier is a nice 
feature. It can be used to get a good idea of 
which tracks to copy and sometimes will even 
produce a good copy The program comes with 
a 42 page manual which covers the options 
offered by the program and also talks about 
different copy protection schemes and offers 
some tips. 

The Protection 

Echo Plus is rather heavily protected. My 
first attempt at deproteaing the program was 
to sec if it could be copied using Super lOB. 
An examination of the di.sk showed that it was 
wnlten in u formal which was far from noniial, 
which rules out .Super lOB. The program 
appears to lie between Tracks $00 and $04 and 



it looks like it is stored on half, as well as, whole 
tracks - 

The next thing I tried was to boot code trace 
the disk. All was well until the code started 
loading onto the zero page, the .stack, the 
keyboard buffer and text page 1, At this point 
i decided that there must be a better and easier 
way to do this. 

The third technique I tried was to boot the 
program into auxiliary memory . This took me 
nowhere. The program only partiaily loaded 
befoic crashing into the monitor. 

1 began to get desperate. I didn't own an NMl 
card and I didn't have any other way of resetting 
into the monitor... or did I? My brother has a 
11+ with a 16K RAM card. 1 remembered 
reading about how it was possible to reset into 
the monitor by moving the RAM card to slot 
1 and setting it up to exit to the monitor. To 
make a long story a little shorter, I tried it and 
it worked. 

The Procedure 

Although this procedure uses a RAM card 
in slot 1 to enter the monitor, any other method 
is fine as long as you have the ability to save 
lower memory (pages 0-7). 

1) The first thing that you must do is to move 
your RAM card to slot 1 . After moving the 
RAM card, insert Echo Plus in drive one and 
enter the followmg commands: 

CALL-I51 

ce9i ce9i 

F8»»<F8ee.H'Fi'M 
FFFC:«W BF 
C09e 

BF0n:A2 mrnimm^nmm 

BFBStES D« F7 EE e4 BF EE »? 
BFie:BF AD (17 BF C9 18 Dfl EA 
BF18:2C 91 Ce 20 91 C* 4C 59 FF 

2) After the program has finished loading, hit 
Reset and you should end up in the monitor. 
Now we will compact the code for the purpose 
of creating the smallest file possible. Page 8 
must be moved to upper memory so that it won't 
be wiped out when DOS is booted, 

18M<8me.99FFM 

3258<9A8e.9ACBM 

60ee<8M.8FFM 

3) Boot the initialized disk. Enter some 
necessary code and save the program as a single 
binary tile. 

CALL 151 
8(l(»<60ee.60FFM 
7FD:4C 00 32 

32ft»:A2 m BD M 10 9D 00 00 
32»8:E8 1>» 1-7 EE 04 32 EE 07 
3210:32 AD 07 32 C9 08 DB EA 
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3218:BD m 18 90 m M EK Dft 
322«:F7 EE lA 32 EE ID 32 AD 
3228: ID 32 C9 9 A Dfl EA BD 58 
3238:32 9D 8» 9A E8 Eft 4F Dft 
3238tF5 A9 A0 8D 90 48 

323E:2t: 83 C« ZC 83 C« A9 tW 
3246:8D 08 9A 8D 40 9A 8D IB 
■ 324E:FD 8D FB FD .A2 FT 9A 4C 
3256:09 80 

BSAVE ECHO PLUS,A$7FD,L$2AA7 

That's il. Now that you have a backup of 
Echo Plus, you can use it to make backups of 
all of your other software. _ 

i 

Edward Hauff's softkey for. . . 



Swashbuckler 



Datamost 

Requirements; 

Apple II 

A way to break into the inwnitor 

Super lOB with swap controller 

Swashbuckler disk 

Blank disk 

When I first played Swashbuckler I could not 
understand why Datamost would want to copy 
protect it. After several shon anempis at playing 
it, I was convinced that it should be in standard 
format so when you got sick of this game you 
could have more fun erasing the disk. The 
protection on this is altered address and data 
marks which can be circumvented using the 
swap controller with Super lOB, 

To jiiake the inconvenience as short as 
possible: 

1) INfT a slave disk with an empty Hello and 
delete same. 

2) Bool the Swashbuckler disk and hold JEEiCl 
while the boot is in progress, 

3) When the Applesoft prompt appears break 
into the monitor with your favorite method. 

4) Move the RWTS down to $19M, 
19»fl<B8ee.BFFFM 

5) Boot the slave disk you INITialized in step 
one. 

6) Save the Swashbuckler RWTS to your Super 
lOB disk. 

BSAVE SWASHBUCKLER RWTS 

,A$i9e0,L$8ee 



7) Run Super lOB and copy Swashbuckler to 
the disk you INITialized in step one. 

8) All done, try to have fun, ^ 

i 

Danny Pollak's softkey for... 



Randamn 



Magnum Software 

Requirements: 

Apple \\ Plus or equivalent 
Randamn 
.Super lOB 1 .5 
A blank disk 

The program Randamn from Magnum 
Software is a game in which you, a candidate 
for the replacement of the demi-god Randamn, 
must traverse seven different worlds, each with 
seven stages. You tnust complete all seven 
stages (28 randomly chosen opponents each) 
before you can advance to the next world. This 
means that you must defeat 196 randomly 
chosen opponents in order to win the game I 

The Protection 

An examination of the Randamn disk shows 
that the address and data epilogue marks have 
been changed from DE AA to UP PE on tracks 
0-$20, The volume number of each sector has 
also been changed so that the address checksum 
will equal zero. The program checks to see that 
it is zero. Track $21 is used for the purpose 
of a nibble count and track S22 is unused. There 
is also a check during the boot to make sure 
that the ,sync bytes written before the address 
marks are not $PP or $PE, 

After extensive searching, I was able to find 
the routmcs that verify that the address 
checksum is zero. A typical routine would look 
something like this: 

■ -J ■ .- 

LDA I2E Load the tfijrreni' traefi # 

EOR $2D Exclusive-or witti sector f( 

CMP I2F Conpare volume # to accumulator 

BfiE ... Brancti on result not equal 

Using this, or a similar manner, it was 
possible for the protectors to verify that the 
address checksum was zero. Once the routines 
were found, all that had to be done was to make 
the check branch to the correct location even 
if the address checksum was not equal to ^ero. 

The Softkey 

l^ Install the controller found at the end of this 
article into Super lOB 1.5. 



2) RUN Super lOB and follow the prompts. 
Initialize the disk with a volume number of 
zero. The disk will be copied and the following 
sector edits wdl be made to prevent the checks 
from taking place: 

Track Sector Byte From To 



00 


03 


42 


38 


18 


03 


m 


4D 


C6 


60 


06 


m 


26 


F8 


EA 


06 


0E 


8D 


96 


m 


07 


03 


lA 


F8 


EA 


07 


07 


7C 


A9 


EA 


07 


07 


7D 


0C 


EA 


07 


07 


7£ 


85 


EA 


07 


07 


7F 


67 


EA 


08 


07 


54 


20 


4C 


08 


07 


55 


4D 


BD 


08 


07 


55 


7D 


64 


09 


08 


D2 


25 


00 


controller 



1000 REM RANDAMN COMTROLLER 

10I0TK=0 :LT = 33 :ST = 15 ;LS= 15 :CD=HR :FAST 

= 1 
1020RESTORE:GOSUei70 : GOSUB490 :GOSUB610 
1025T1 = TK:TK = PEEK (IRK) . G0SUB31S .TK = T1 
1030 GOSUB 230 : GOSUB490 : G0SUB61fl : IF PEEK 

(TRK) <L[ [HEN 1050 
1040TK = PEEK(TRK) :ST = PEEK (SCI) : GOTO 1020 
1050 HOHF : PRINT "COPYDONE" : END 
5000 DATA 223 .254 .223 ,254 
5010 DATA 13' CHANGES 
5020 DATA 6 ,3 ,65 .24 
5030 DATA 3 ,0 .77 ,95 

5040 DATA 6 ,9 .38 ,234 ■'' 

5050 DATA 6 14 ,141 ,0 
5060 DATA 7 .3 ,26 ,234 
5070 DATA 7 .7 ,124 .234 
5080 DATA? ,7 ,125 .234 
5090 DATA 7 ,7 ,125 ,234 
5100 DATA 7 ,7 ,127 ,234 
5110DATA8 ,7 ,84 76 
5120 DATA 8 ,7 .85 .189 
5130 DATA 8 ,7 ,86 .100 
5140 DATA 9 ,8 ,210 ,0 



controller checksums 


1000 - 53568 


5040 


- tB279 


1010 - ilA22 


5050 


- $F2F8 


1020 - I7CA8 


5060 


- $72DD 


1025 - I61B9 


5070 


~ W6C7 


1030 - $0471 


5080 


- 15803 


1040 - $FC56 


5090 


- $fl48C 


1050 - $75FA 


5100 


- $5481 


5000 - $5550 


5110 


- $41E6 


5010 - S34D4 


5120 


- $6BB7 


5020 - S919E 


5130 


- S0AeD 


5030 - S3739 


5140 


- S7AE0 
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Turn Drive 1 into Drive 2 virith tlie... 



Electronic Disk 



by William Wingfield Jr. 



Requirementsi: 

Disk n controller card 

Low -wattage soldering iron 

Small hook-up wire 

Miniature DPDT switch 

14 pin IC sockcr or 74LS132 TC (optional) 

Note; The procedure described below requires 
nwdification qfthe disk comraller card and may 
(will) void any warranty. COMPVTIST will not 
be held responsible for any damages incurred 
while foUowing this procedure. 

If you have two disk drives there have 
probably been times when you wished there was 
a way to do a boot from drive 2. This article 
will show you how to make a simple hardware 
modification to your drive controller card that 
will allow you to do this at a flip of the switch. 
While this article is written using the Apple 
Disk □ interface Card for illustration, the 
techniques used apply to almost any floppy 
drive controller card. 

Theory 

A brief description of how the card accesses 
the drives will help in imderstanding how this 
modification works. Look at the schematic of 
the controller card on page 145 in the Apple 
DOS 3.3 manual and examine your card. All 
infonnation to and from the drives is carried 
through the 20 pin coimecting cables. A look 
at the schematic or card will show you that the 
pins for the cable connectors are all parallel 
except for the ones on pin 14. These are the 
ones thai enable the selected drive. If we could 
reverse ihsae two connecdons the controller 
would acmally access drive 2 when it meant to 
access drive 1 . This allows a boot from drive 
2 and other uses that will he discussed later. 



Both pin 14's of the cable connectors come 
from the 74 LSI ,32 chip at location A2 on the 
card; drive 1 from pin 18 of the chip and drive 
2 from pins 6 and 9. We will make the 
modification here at the chip. 

Procedure 

Start by deciding where you would like the 
switch located. It may be allowed to hang loose 
out the back of the computer but I recommend 
mounting it on the case. Cut four pieces of 
hook-up wire long enough to reach from the 
card to the location that you have selected for 
the switch. Solder these to the DPDT switch 
along widi two short pieces to make a reversing 
switch as shown in Fig. 1 . (Note: You DON'T 
want a Center-Off type of switch.) 

Next remove the controller card, disconnect 
the drive cables and remove the chip (the 
74LSi32 at location A2), Prepare it by gently 
bending pins 6, 8 and 9 straight out from the 
chip. Pin 6 must be bent up because a foil 
connection under the socket coraieos it to pin 9. 

Remove 1/8 inch insuiation from one of the 
common pins of the switch and solder it to pin 
B of the IC. Remove 5/8 inch insulation from 
the ofher common pin of the switch and solder 
it to pins 6 and 9 of the IC, bridging across the 
top of the chip with the wire. Make these 
connections quickly to avoid possible heat 
damage to the chip, "Tinning" the wires will 
allow you to make the connections quickly and 
without overheating the IC. 



Remove 1/8 inch insulation from the 
remaining two leads and solder these to the back 
of the controller card at pin locations 8 and 9; 
refer to Fig. 2 to identiiy these. If these 
conections are a little closer than you feel 
comfortable with you can use locations 8 and 
6 because of the comiection between 6 and 9 
under the socket on the board. 

Now place the chip back in the socket. Fig. 
3 shows the chip in position with the pins bent 
out. The wires to the back of the card are 
omitted for clarity. Thoroughly inspect your 
work for proper wiring, solder bridges, etc. 
Once satisfied that everything is in order you 
may proceed to test the modified card. 

Simply replace the modified card, reconnect 
your drive units and power up. One of the 
drives should come on as usual. Turn the power 
off, flip the drive reversing switch and power 
up again. This time the other drive should come 
on. Note which position of the switch gives the 
normal start up of drive 1 and which gives the 
new option of starting up with drive 2. Mark 
or position the switch so that you know which 
is which and you are done. 

Alternative 

If you don't wan't to solder to the card itself 
you may simply insert the wires tliat solder to 
the card into their respective positions in the 
IC socket. Extra care must be taken to make 
sure that the leads make good contact in the 
socket and diat Uiey don't contact the pins that 
were bent up on the chip. A spare 74LS 132 chip 
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Drive Sivapper 




and this type of modification will allow quick 
restoration of the card to its original condition. 

Another altemative is to modify an IC socket 
instead of the IC itself, that is to bend out pins 
6, 8 and 9 on the socket and proceed to solder 
the leads to it instead of the IC, If you use this 
method be sure to choose a socket that will plug 
into the socket on the card without problems. 
Simply plug the IC into the modified socket and 
then plug this assembly into the socket on the 
controller card. Removing the modified socket 
and replacing the IC will return your card to 
its original position. 



Final Options 

If you choose not to mount the switch I would 
recommend looping the leads through the small 
hole in the card at the back to act as a stress 
relief. If you do mount the switch somewhere 
on the case of your computer (mine is above 
and to the right of the keyboard), you can add 
a couple of small LEDs for a visual indication 
of which drive is sensed as drive 1 . A 3PDT 
switch must be used to switcli the LEDs. I have 
a green indication for a drive 1 boot and red 
for drive 2. I also have a 8 -pin header/socket 
unit to make the connection between the switch 
and the card so that the card and the case aren't 
wired together. 



Uses 

Being able to reverse 
your drives may seem 
just a convenience ai 
first but will soon 
become a necessity. 
You can have your 
adventure game in one 
drive and the game save 
disk in the other and 
simply flip the switch to 
access each one instead 
of swapping disks. The 
same applies to other programs that require 
changing disks. 

I use mine consistently when trying to 
deprotect software. I keep a utility disk in drive 
2 and the programs are always available. Some 
of the older copy programs don't allow you to 
choose the source and target drives; now you 
can. 

I don't know if this has any practical use but 
here is an interesting trick you can do with this 
modification. Boot up your favorite nibble 
copier and put a blank disk in drive 2. Now 
position the head to a track on the blank disk 



by doing a data scan or whatever feamre you 
have that allows you to do this. Let's say we 
have placed the head on crack $8 . Now go into 
the copy mode, select drive 1 as die source and 
target drive and read a track, say 511. When 
you are prompted to insert the copy disk flip 
the Drive Swapper switch and continue as if you 
had changed disks. Since the copier assumes 
that the same drive is being used to write and 
that the head is still in the proper position it wiU 
write to track S8 on drive 2, thus allowing you 
to move a track. You now have the catalog on 
track $8 but with all the markers of Sll. 
Interesting. 



After using the drive swapper switch for a 
while you'll wonder liow you ever got along 
without it. 
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Abusing the Epilogues 



by Rich Etarip 



Quite sjome time ago I came up with a tricky 
method of copy protecting a disk which is kind 
of unique in a way. The disk will be easily 
copyable by any copier, but. there is a trick to 
it. By writing and calling a disk access routine, 
the computer will hang if the original disk is 
not in the drive. This is enough to defeat 
copying by the average user, Keep in mind 
though, that this method will not protect against 
bit copiers such as Locksmith. However, it will 
protect the disk from being easily copied. 1 like 
it because the person copying the bisk is fooled 
into thinking that it is easily copied and later 
finds out that it is not. Here is an explanation 
of how it is done: 

If you have been keeping up with 
COMPUTIST magazine, then you should know 
that DOS writes address and data markers to 
the disk to tell it where the data begins and ends 
on a disk. The standard end of address and end 
of data marks are DE AA EB. However, only 
the DE and the A A are used by DOS. The EB 
is not used and really has no effect on the disk 
if it is changed. Since normal DOS copiers do 
not copy the EB mark, If we were to change 
it to, say an EE, then check the disk to make 
sure the EE is present, a copy of the disk would 
not work. AH you have to do is change locations 
$B8A8 and $BCBS from $EB to $EE and 
initialize your disk. Then write a disk check 
routine to verify that the SEE is present on the 
disk. See Listing 1 for the disk check routine 
that I came up with. 

The reason I put this routine at $B6Cfl is 
because that memory is available in the DOS 
area and should not be disturbed by any 
program. It can be easily accessed with a JSR 
$B6Ce from assembly or a CALL 46784 from 
BASIC. 

The routine is pretty simpSe to understand. 
It basically jusS checks Track & for the modified 
$EE byte. However, it you wanted to, you 
could put a loop in it so more than one track 
is checked for the SEE, If you were to do that, 
you would probably have to relocate the routine 
in another part of memory because there would 
not be enough free space at .$B6C0 for a larger 
routine. Another thing to keep in mind is that 
you must also change locations SB8A8 and 
SBCBS to $EE if you ever want to write 
something to your disk. Otherwise $EB end 
marks will be written to those tracks which you 
write to and your disk check routine will bomb 
on you. Plus, when you scan a number of tracks 



at a time, the drive head will move from track 
to track quickly and make a suspicious sound 
that would indicate the disk is being checked. 
The best time to call this routine is right 
before or right after the disk is accessed because 
then it is not so obvious that you are just doing 
a check to the disk. 

Making Your Own Protected Disk 

1) The first step is booting a fresh DOS and 
entering tlie monitor. 



PR#6 
CALL 



151 



2) Next, change two locations in DOS from 
SEE to SEE. 

B8A8:EE N BCBSitlE 

3) Now enter the hex dump in Listing 1 . When 
finished, make the following modifications to 
Boot 1 at $B600. When the disk boots, boot 1 
loads intt) $800 but right now it is located at 

mem. 

B64A:4C B4 B6 
B6B4:2e Ce B6 4C W B7 

What these modifications will do is cause Boot 
1 to call the disk access routine at .$B6CCI. That 
way, a copy of your disk will not even boot. 

4) The next step is initializing your disk. 
INIT HELLO 



S) When the initialiTiation is complete, reboot 
DOS (not with the disk you just formatted) and 
run a normal DOS copier such as COPY A and 
make a copy of your disk. When finished, try 
booting the copy. If all has been done correcdy, 
the copy should just hang with the drive 
spinning. Pretty neat, huh? 

It is a good idea to call the disk access routitie 
a number of times from your program and you 
may even want to go as far as checking the disk 
access routine from your program to make sure 
that it has not been tampered with. This is easily 
accomplished by adding up ail the bytes in the 
routine and making sure the total comes out 
correct. There is really no limit to the number 
of things you can do with a protection scheme 
such as this, I'll leave the rest to you. Good 
luck!!! 



Protection Hexdump 


BGC0: 


A2 60 BO 89 C0 BD 8E C0 


$4E59 


B6C8; 


A9 m 20 AS FC A9 m 20 


SE15A 


B6D0: 


A0 B9 A0 04 SD 3C C0 10 


SAAAD 


B6D8; 


FB C9 DE D0 F? BD 8C C0 


SFDS9 


B6£0; 


10 FB C9 AA 00 EE BO 3C 


$E00A 


B6E8: 


C0 10 FB C9 £E F0 86 88 


S8E33 


B6F0; 


m E2 4C F2 B6 BD 88 C0 


iF477 


B6F8: 


60 


SFF44 



B6C0- 


A2 60 


LDX mm 


Specify slot 5. 


B6C2- 


BD 89 C0 


LOA $C089,X 


Turn on the disk drive. 


B6C5- 


BD 8E C0 


LDA $C08E.X 


Tell the disk drive we are reading. 


B6CB- 


A9 00 


LDA #S00 




B6CA- 


20 AS FC 


JSR $FCAa 


Do a quick delay to al low drive to turn on. 


B6CD- 


A9 00 


LOA flS00 


Load accumulator with $00 for SEEK command. 


B6CF- 


20 A0 B9 


JSR SB9A0 


Call the SEEK command in DOS to seek Track 0. 


B6D3- 


A0 04 


i.Dv am 


Allow for 4 possible errors before hanging. 


B6D4- 


BD 8C C0 


LDA SC08C,X 


Read a byte from the disk 


B6D7- 


10 FB 


BPL $B6D4 


If not a valid dish byte, try again. 


B6D9- 


C9 DE 


CMP #$DE 


Check if byte is SDE. 


B6DB- 


D0 F7 


BNE SE6D4 


If not, get another byte. 


B60D- 


BD 8C C0 


LDA SC08C.X 


A SDE was found, read another byle, 


B6E0- 


10 FB 


BPL SB600 


Valid byte? 


B6E2- 


C3 AA 


CHP «M 


Does SAA follow the SDE? 


B6E4- 


00 EE 


BNE SB6D4 


NO Look for another JDE. 


B6E6- 


BD 8C C0 


LDA SC03C,X 


A SDE $AA pair was found. Read the next byte. 


B6E9- 


10 FB 


BPL SB6E6 


Valid byte? 


B6EB- 


C9 EE 


CMP ttm 


Is it our modified $EE? 


BSEO- 


F0 06 


BEQ SB6F6 


Ves! Original disk present. Go to end 


B6EF- 


88 


DEY 


Error encountered. Byte was not SEE. 


B6F0- 


00 E2 


BNE $B604 


If 4 errors have not occured. try again 


B5F2- 


4C F2 B5 


J MP JB6F2 


4 errors. No SEE bytes found. Computer hangs. 


B5F5- 


BD 88 C0 


LDA $C0E8,X 


Turn off disk drive. 


B6F8- 


60 


RTS 


Return from subroutine. 
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print shop companion's... 



by Marc Batchelor 



Broderbund Software Inc. 

17 Paul Drive 

San Rafael, CA 94903 

$39.95 

Requirements: 

Print Shop Companion 
64K ][ Plus, //e, //l 

When I buy a program, 1 like to find out just 
exactly what makes it tick. So, I fool around 
a ioi with the program (in its unprotected state 
ihanks to COMPUTIST). The Print Shop 
Companion is no exception. Upon trying to boot 
up the back side of the disk, t took notice of 
the nice screen format and decided I might want 
to use this type of format later in my programs, 
so I pressed the Reset key on my //c, and the 
disk promptly rebooted. I then decided to boot 
the back side into auxiliary memory using Ken 
Greenlaw's method (XFER.BOOT and 
RESTORE) given in issue No, 16. Worked like 
a charm. Son of. I pres.sed Re.set and appeared 
in Applesoft. But, the strange part was that the 
cursor seemed sluggish as if a "SPEED" 
command had been issued. So, I typed 
SPEED =• 255 and hit Return. I found myself 
staling at the contents of memory location $B3. 
Interesting. So, I typed 

3F8:4C W «3 

(which hooks up the 13 Yl vector), and 
BLOADed RESTORE. 1 then moved 
$860-$95FF from auxiliary memory to main 
memory with: 

Then I did a massive 
BSAVE after I told 
IMS I could do so 
(A964;FF), I then 
rebooted DOS and 
BLOADed the file. 1 
found that if I typed 
■•1000G" that neato- 
keen screen would pop 
right up. So I pressed 
Reset to disassemble the 
program and 1 got that 
sluggish cursor again. 
Grr, This time when I 
typed SPEED = 255 
everything went 
normally and I got my 
normally prompt 
prompt (pun intended), 
I was merrily listing 
from $1000 on and I 
came upon some 
strange code starting at 
$119E. 



Driver 




^,1 



119E- 
11A0- 
UA2- 
UA4- 


C9 9E CMP #S9B 
F0 5F BEO iUAD 
C9 9E CMP iS$9E 
F0 6F BEQ S1215 


I started the listing at $1215 and got 


1215- 
1218- 
12 IB- 


20 2F FB JSR $FB2F 
20 5B FC JSR tFC5E 
4C 00 60 JMP $6000 



1 quickly looked at my Beagle Bros ASCII 
chart, and found that this code compared with 
the Escape key (£9B ), branched back and 
compared with " |i36l " ($9E), and if equal, 
jumped to $1215, 1 then powered down, booted 
up the back side of my disk, and when the 
message came up, I pressed f Escape)- IE16 1 . 
Who would have believed it? I was at the start 
of a game by Roland Gustafsson called 
DRIVER. It listed several skill levels, and a 
place that showed high scores. I guess the folks 
at Electronic Arts aren't the only ones who put 



<EeC> lO CO BbCK 




undocumented features into their programs. To 
save diis game into a file was then very easy. 
I took out my disk with ihe 131-seQtor chunk 
of memory that I had .saved, RI..OADed that 
chunk, and looked at $1215. Since $6000 is an 
obvious place to put a program, I typed 6fM)0G. 
Sure enough, there was the game. I pressed 
Reset and set my speed back to normal and took 
a look at the program. As it turns out, it was 
less than £500 bytes long. 1 .saved the game 
with: 

BSAVE DRrVER,A$6«#e,L$48A 

The game only took up 6 sectors, and worked 
like a charm. 
In a nutshell: 

1) Boot the back side of Prim Shop Companion. 

2) Take the Companion disk out of the drive 
and replace it with a slave disk with no HELLO. 

3) Press Re.set. It will reboot and you will find 
yourself in Applesoft. 

4) Save the game to 
disk. 



BSAVE DRIVER 
,A$600«,L$41JA 

That's it. The game 
is rather lame, but fun. 
To change gears, press 
the desired gear 
number. To prove that 
the folks at Broderbund 
are really bizarre, boot 
Ihe front side of the 
Companion, and at the 
menu type STEVEN 
and press the Escape 
Key. Have fiin. 
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Using a TI/99 keyboard ffor». 

Keyboard Repair 



by Philip Goetz 



Warning: Uie procedure described below 
derails modificanons W your computer which 
could cause damage to it. COMPUTIST or 
SoftKey publishing yvitl not be held responsible 
for any events that occur while foUowirtg this 
article. 

Requirements: 

Soldering Iron 
TI/99 Keyboard 
Screwdriver 
Desoldering tool 
Vise Grips (optional) 

Eventualiy.akey on your keyboard will stop 
working. It's happened to me five times. The 
symptom is simple; you press the key. but 
nothing happens. Your Apple dealer will be 
happy to replace your keyboard for, say, $145. 
But there's a cheaper solution. 

All five times one of keys iitopped working, 
it wasn't because my whole keyboard was 
broken, jusl the keyswitch for one key, A 
key switch electrically connects two solder 
terminals on its bottom when its key is pressed. 
You can buy keyswitches from some Apple 
dealers for about $5 each (be sure to specify 
which type of Apple you have). A much better 
deal is to buy Radio Shack's TI 99/4 keyboard 
(catalog number 277-1BI7) for !ii2.95. This gets 
you 48 keyswitches, including one which locks 
on or off. If you buy this, you will have to 
carefully take each keyswitch out of the 
keyboard as you use it, and save the plastic stem 
from your old Apple keyswitch. which is angled 
differently. 

The procedure involves removing your 
Apple's keyboard, removing the new keyswitch 
from tlie other keyboard (unless you buy 
individual keyswitches), removing the old 
broken keyswitch from your Apple keyboard, 
putting the Apple keystem in the Radio Shack 
keyswitch (if you have those or some other 
keyswitch with a different stem), soldering the 
new keyswitch into your Apple keyboard, and 
putting your Apple back together. This will void 
your warranty, so don't tell anybody. Neither 
I nor COMPUTIST are responsible for any 
damages caused to anything or anybody by 
following, reading, or even thinking about this 
article. This article was written using an Apple 
J I Plus and a elone; details (such as screw 
placement) may differ with a //e and definitely 
will with a lie. 



Removing the Keyboard 

Plug in your soldering iron. Turn your Apple 
off. Unplug it at the wall and then pull the plug 
out of the computer. Discoimect your TV or 
monitor at the plug on your RF modulator or 
at the Video Out port, respectively. It may help 
to remove any disk drives at tfiis point. Turn 
the computer upside-down, with the keyboard 
at the front. 

Remove the four screws at the front, the two 
on each side, and the two farthest to the back. 
There is a third screw about 3/4" forward and 
to the right of the left rear screw, Do not 
remove it; it holds the motherboard on. Put all 
the screws in a safe place. 

Now slowly lift the bottom steel plate which 
holds the motherboard and power supply off of 
the case until you can unplug the keyboard cable 
from the motherboard. Draw a diagram 
showing which way the cable is attached before 
you remove it. 

Set the case upside down and remove the six 
screws holding the keyboard on. Remove the 
keyboard. 



GAP 



STEM 



FLAP — - 




- TAB 



EXl tRNAL 
COW TACTS 



Removing Keyswitches 

A keyswitch is connected to the keyboard by 
two electrical contacts soldered to a printed 
circuit board, and by two plastic tabs, one on 
each side of the key , which lock the keyswitch 
in place (see figure). First pull the keycap off 
the keyswitch. There are two basic ways to 
remove the keyswitch; 

1) To remove a good switch, find some way 
of pressing the ends of the two tabs toward each 
other while applying a soldering iron to both 
electrical contacts and pulling on the keystem. 
Since the labs and the contacts are on opposite 
sides of the keyboard, and it is sometimes 
difficult to lay a soldering iron lengthwise 
across two contacts, it is best if you get one 



person to concentrate on pressing the tabs and 
pulling the key while you hold the board and 
melt the solder. You may want to apply pressure 
on the contacts with the soldering iron to help 
push the keyswitch out. 1 use needlenose pliers 
to press the tabs and a vise grip on the keystem 
to pull the keyswitch out. Both are done on the 
top side of the keybord. I'm .sure there are better 
ways. With patience, the switch will eventually 
come out. 

2) To remove a bad switch, munge it (mash 
until no good). Get all your small, sharp, 
gripping and tearing tools and rip the .switch into 
pieces. If your replacement switch has a 
different-looking keystem (i.e. Radio Shack), 
you must save the Apple keystem (sec figure); 
be careful not to damage it. It is a good idea 
to have someone hold a vacuum cleaner near 
the keyswitch once you have the keystem out 
to keep shards of plastic out of the keyboard. 

Repiacmg the Keystem 

Once you have both the good and bad 
keyswitches out, put the old keystem in the new 
keyswitch if neces.sary. To do this, you must 
first pry the black plastic top half of the 
keyswitch case off of the bottom half. Do not 
try to pull out the 4 black wedge-shaped tabs 
which are part of the top half. Instead, puU the 
2 grey flaps from the bottom half out of their 
way. Fingernails may work if you haven't cut 
them lately. 

After removing the top half, be careful not 
to spin and lose the spring, stem, or contact 
which arc inside it. Replace the keystem with 
the old one, and carefully align the stem and 
vertical contacts (parallel to the stem) so you 
can slide the tq) half of the keyswitch case back 
on. You may want to test the keyswitch 
electrically before soldering it into your 
keyboard. 

Putting it All Together 

Put the good keyswitch into the hole where 
the bad one used to be. It is impossible to put 
it in upside-down because the external contacts 
are both on one side. It may not slide in all the 
way because hardened solder prevents the 
outside contact points from going through the 
two little holes in the keyboard's printed circuit 
board. If so, encourage it with a soldering iron. 
Snap the keyswitch in place and glob some 
solder over the contacts. Put the keycap onto 
the keystem. Finally, unplug your soldering 
iron and put your Apple back together opposite 
of how you took it apart. 
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by Jerry D. Greer 



Requirements: 

The Applesoft Tutorial 
The Applesoft Sampler Disk 
Apple //c Computer 

Wheu a friend of mine got away from Apple 
computing, (hard to believe but it happened), 
she gave me her copy of the Applesoft Tutorial 
with the Applesoft Sampler Disk chat comes 
with it. She was moving into more advanced 
languages using mainframe computers. 

On the other hand, I had just acquired my 
Apple tic and was anxious to see what it (and 
I) could do. I soon discovered Uiat the sampler 
disk was not compatible with the //c. It was 
obviously not intended to be used on the new 
//c machines. 

For many, it may not be worth worrying 
about. For others, the routines supplied on thi.s 
disk are helpful and easy to use. The programs 
come in very handy for some simple but 
significant programming tasks. The "MAGIC 
MENU" is one of the these special routines. 



Again, note that the topic line is off by one line 
from the item number. And again, even though 
the numbers and topics have disappeared from 
the screen, you can still select any number from 
] through 12 and the sample program to which 
it refers will ^till run. The trouble Is that you 
have no list for reference when selecting! By 
looking over all of the problem areas, it 
becomes obvious that die program examples 
will run but the menus do not act right. 

The Source of the Frobiem 

After you have identified the problem, this 
.istep is relatively easy. In fact, you will find Uie 
BASIC program listed in Appendix E of the 
Applesoft Tutorial manual for Magic Menu, 
Disk Menu, and Converter. Looking at those 
listings, you will notice thai one block of the 
program is devoted to a "menu maker". I 
looked through the listing to see if 1 could find 
some code that might be the source of the 
problem. 

Because the problem concerned scrolling and 
the alignment of the item numbers with the 
topics, line number 62.S in the MRNLI MAKER 
routine caught ray attention. To see how it 
looks, list this line as it appears in the program. 



A //c fix for the... 



Applesoft 
Sampler 



It has shown up in several of my projects. The 
disk (as expected) works fine on the //e. 
However, the programs contain a screen 
formalting routine (using some memory peeks). 
The problem for the Uc is in one of tliese 
routines. 

Identifying the Problem 

If you have tried to run the "Magic Menu" 
on a //c, you have seen the problem. When llie 
main menu for the sampler comes up, it is 
noticeahle that the menu topics do not line up 
with tlieir item numbers. The column of 
numbers is shifted down one full line leaving 
the topic headings off by a line. 

Despite diis offset, the item numbers still 
refer to specific programs on tiiis menu (there 
are 4 of them). If you select number 1, 
EXAMPLE PROGRAMS FROM THE 
APPLESOFT TUTORIAL, you will watch as 
the numbers and topics for this next menu 
section roll past. Each topic is printed to the 
same, top line on the screen. The final line 
shows this: 



RETURN TO MENU 



11. 



Get into BASIC and do this: 

LOAD MAGIC MENtl 
LIST 625 

The line will appear somediing like this: 



625 VTAB PEEK (37): IF C0L88 
THEN VTAB PEEK (1531): REM 
BELOW PRINT MOVES DOWN 1 LINE, 
THIS COMMAND IS A TRICK TO MOVE 
UP EXACTLY 1 LINE FIRST 

This line in the program causes the print on 
the screen to move up one line while the la.st 
line is printed, in hirn, onto die screen display . 
So, I simply rewrote line 625 to be like this: 

62S VTAB PEEK (1531) 

and wrote the file back to my work disk (not 
the original). 

Test the Solution 

At this time, I booted up die disk and watched 
the menus come up. They behaved like they 
were supposed to this time All of Uie 12 menu 
selections on the EXAMPLE PROGRAMS 
FROM THE APPLESOFT TUTORIAL were 
properly arrayed on the screen. 



Fixing the Program for the lie 

Get into BASIC. The Applesoft prompt "1" 
will appear in the lower left comer of the 
screen. Insen the Applesoft Sampler disk in the 
drive and follow these steps to make the fix on 
each of the three programs that are giving you 
troubles. 

A) First, put the magic back into the MAGIC 
MENU. 

UNLOCK MAGIC MENU 
T-OAD MAGIC MENll 
625 VTAB PEEK (1531) 
SAVE MAGIC MENU 
LOCK MAGIC MENU 

B) Second, put the display back into the DISK 
MENU. 

UNLOCK DISK MENU 
LOAD DISK MENLI 
625 VTAB PEEK (1531) 
SAVE DISK MENU 
LOCK DISK MENU 

C) Third, convert the CONVERTER. 

UNLOCK CONVERTER 
LOAD CONVERTER 
625 VTAB PEEK (1531) 
SAVE CONVERTER 
LOCK CONVERTER 



Final Touches 

After you have made the changes in the 
program so that you can use it on the //c. label 
the disk so that it will not be confused with the 
other, original . It would also be a good idea to 
post some note about the change in die program. 
Instead of the brief entry I have shown above, 
you might like to do something Uke this: 

625 VTAB PEEK (1531): REM THIS 
LINE IS CHj\NGED FROM THE 
ORIGINAL FOR lie USE 

Notice that it is permissible for you to make 
changes in this program for your own use. In 
Appendix E of the Tutorial manual, one of the 
stated objectives is "To offer usefiil routines 
that you can incorporate into your own 
programs ' ' Another objective states in part that 
"... Tile programs discussed here are to be 
played with, modified, experimented with, and 
changed." 

The entire Tutorial applies equally well to 
users with the lie computer but a few things 
have to be disregarded. For instance, you 
should ignore all references to using a cassette 
recorder. A few other very minor differences 
wUl show up if you go through the lessons but 
they are not critical. The program is worth 
Iiavljig if you are learning to program in 
BASIC. We owe a vote of th.mks to Apple 
Computer for giving us this program to play 
with! 
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softkey for... 



MIDI/8 Plus 



by Ray Darrah 



Passport Desig)ts Inc. 

625 Miramontes St. 

Half Moon Bay, CA 94019 

(415) 726-028& 

RequiremeHtii: 

Locksmith Fast Copy or similar 
Sector editor or Copy ]l Plus 

It looks like the folks at Passport have done 
it again. It seems they didn't heed my intense 
dislike for the copy protection on their MIDI/4 
program (article appearing in COMPUTIST 
No. 28). I was hoping that MIDl/8 Plus would 
be distribnted without copy protection. So much 
for hope. 

As I suspected, the protection on this disk 
was similar to MIDI/4' s protection. They are 
still using a file called READER to perform a 
nibble count on tracks $03 and $10, If die nibble 
count fails four times, then the computer locks 
up and beeps at you until you shut it off. 

Luckily, getting around the protection is also 
accomplished in a similar manner. It involves 
re-arranging the boot sequence so thai the 
READER fUe is loaded but never executed. 

The first step in re-arranging the boot 
sequence is to figure out what the current 
sequence is. One way to do this is to msert 
MONCIOs here and there throughout the boot. 
Since the program uses only a slightly modified 
version of Diversi DOS, another way to 
examine the boot .<Kquence is to use an NMI 
card (like my handy Abacus Know Drive) to 
Stop the program for a moment and change 
location $AA5E to a $40. 

Doing this revealed that the DOS cotnmands 
were issued in the following order: 

BRUN TABLES 
BLOAD READER 

BRUN DDH 
6L0AD P0IH8P1 
BLOAD BfiUNH8P+ 
BLOAD MB.OBJ0 
BLOAD MB. OBJ IP 



BLOAD CLK24TBL 
BLOAO STK 
BLOAD MSPZ 

There is a file on the disk called HELLO but 
it is a blank Applesoft file tliat is never 
executed. Copy ][ Plus quickly revealed that 
Passport chose TABLES as the boot file. 

Since the READER file wasn't BRUN, it 
must be exeeuted by some oilier program (most 
probably by TABLES). A little closer 
examination revealed that READER was 
BLOADed at $8Dflfl and at S98C (in the 
TABLES program) there was a JMP to $8D00. 

Apparently, if everything went fine on the 
nibble count, the READER file would then 
BRUN DDM, BLOAD PDIM8P1 (the title 
picmre), BLOAD BRUNM8P+ and executed 
it. Due to the extreme perversion of the code 
in the READER file, I was unable to find the 
code that actually did this. But it seems logical. 

A little testing revealed that the BRUNM8P + 
file loaded the remaining files, did a little 
memory .setup and returned. A quick stroll 
down memory lane al this lime (and a lilUe 
Know Drive snooping) showed that the original 
program would execute fine from this point with 
an A01G from the monitor. 

The Patching 

First of all, 1 copied the original disk with 
Locksmith Fast Copy and ignored the expected 
errors on tracks $03 and $10. Then I changed 
the boot program to be the usual HELLO 
instead of TABLES, Next, E wrote a short 
BASIC program that did the work that 
READER file does if everything goes well and 
BRlfNs TABLES when finished. Then I 
patched TABLES so that it calls BRUNM8P-h 
and jumps to $Afll to start up the program. 

After all that work, it bombed into the 
monitor. The area around SA01 wa.s garbage 
on the copy but when 1 booted the original there 
was valid code there. I then noticed that if you 
EGRed every byte from $A01 to $B01 with $09 
the code would be the same as the original 
disk's. 

I therefore extended my patch to TABLES 
to include the EORing of all the bytes from 
$A01 to $B01 and voUa, a perfect deprotected 
copy of MIDI/8 Plus! Hooray. 



Step by Step 

1) Copy MIDI/8 Plus with Locksmith fast 
copier or any whole disk copier that can ignore 
errors on tracks $3 and $10. 

2) Change the boot program to be "HELLO" 
instead of tables. This can be accomplished in 
one of two ways; 

a) Use the Copy J[ Pius "Change Boot 
Program" option. 

b) Use a sector editor and edit track $01. 
sector $09. Starting at byte $75, replace the 
word TABLES with the word HELLO. Next, 
edit track $00, sector WD byte $42 firom a $34 
to a $06, [ 

3) Boot normal DOS, insert the copy of MIDI/8 
Plus aiid type the following: 

FP 

10 PRINT CHR$ (4) "BRUN DDM" 
n HfiR? : PR I NT CHR$ (4) "BLOAD PD IHBPl " 
30 PRINT CHRJ(4) "BLOAD BRUNM8P+" 
40 PR I NT CHRS( 4) "BRUN TABLES" 

UNLOCK HELLO 
SAVE HELLO 
LOCK HELLO 

4) Now wc will change the TABLES file so ihat 
it won't execute READER hut instead, call 
BRUNM8P+ , EOR $A01 - $B01 with $09 and 
start the program, 

FP 

BLt)AD TABLES 
CALL -151 

98C:20 00 80 A2 
930:00 BD 00 0A 49 09 90 00 
99e;0A E8 00 F5 AD 00 0B 49 
9A0:09 6D 00 0B 4C 01 0A 

UNl,OCK TABLES 

BSAVE TABLES,A$8«1,L$1A6 

LOCK TABLES 

5) Put your original disk in a death star far, far 
away and make as many backvip copies of the 
MIDI/ 8 Plus as you wish, 

Thanks to Ray Fermki ^^ 

'S 
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softkey for... 



by The Nipper 



Sierra On-Line 
Coarsegold. CA 93614 

ReCfu iremen ta : 
48K Apple 
COPYA 
Sector editor 

I know that there has been a erack around 
for the original version of Homeword for a 
while (Book of Softkey s 1) but as any of you 
who own the newer 2. 1 version know that that 
crack doesn't work for this version. Although 
this version takes longer to boot due to the 
loading of two hi- res pages, it does support a 
larger number of printer cards including the //c. 
Since I some times use my Homeword to edit 
my source code I decided to open it up. 

The Protection 

A quick look at the Homeword disk with the 
nibble editor from my Copy II Plus (you can 
use any nibble editor) showed me that the disk 
had u standard DOS 3.3 format. I hauled out 
my COPYA and made a copy. When I tried to 
boot the copy, the disk booted as usual through 
the first two hi-res screens and then scrambled 
what was on the hi -res and shut off the drive. 
By watching the boot sequence on my Track 
Star. I could see that the trouble occurred after 
the drive arm swung back to track $fl. Aha! The 
famous Sierra On-Linc nibble count. 

I tlien rebooted my copy and stopped it when 
it swung 10 do the check of track SB. Bingo, 
I found myself staring at some fascinating code 
on the $2E00 page of memory . A quick check 
of tlie disk found this code on track $10 sector 
$9. This code looks for a sequence of bytes on 
track $0. The code that is important to us starts 
at $2E57 and looks as follows: 



2E57- 


LDA $0389, X 


turn on drive 


2E5A- 


LDA #$D5 




2E5C- 


STA $eB02 


put a $05 at 


2E5F- 


J5R J2E93 




2E62- 


BPL S2E65 


always taken 


2E64- 


JSR scsca 





$BeB2 



The first instructions turn on the drive and 
then put a $05 in location $BBfl2. This location 
IS the key since any subsequent error that is 
encountered in the check of track $0 decrements 
$BB02. If you check the boot with your original 
disk you will find that a S05 is still in this 
location after tlie check of track $0 has 
occurred. Now the JSR that follows goes to the 
subroutine at $2E93, which finds sector $0 and 
reads the address information and data 
prologue- It llien reads in $FF bytes plus $5B 
of data ($15 A) and returns. Since there are $156 
bytes in a data field plus one cliecksum byte diis 
routine reads to the end of the data epilogue 
bytes. The BPL (Branch if PLusJ ai $2E62 in 



I ^, 



Home^MTord 
v2.1 



taken into the middle of the next instruction 
yielding the following code: 



2E65- 


INY 


incretnent counter 


2E66- 


CPY #$30 


check if y=$30 yet 


2E68- 


EOR $C08C,X 


read a byte 


2E6B- 


BCC $2E65 


loop unt i 1 y=$30 


2E6D^ 


LDA $C08C,X 


read a byte 


2E70- 


BPL $2E7C 


wait until legal byte 


2E72- 


CMP #$C9 


is it SC9? 


2E74- 


BNE $2E83 


indicate error if not 


2E76- 


LDA iC08S.X 


turn off drive 


2E79- 


JHP $2E8B 


exit routine 


2E7C- 


NOP 




2E70- 


NOP 




2E7e- 


LDA sceecx 


read byte 


2E81- 


BHI $2E72 


branch if val Id byte 


2E83- 


DEC $BB02 


else decrement count 


2Ea6- 


BNE S2E5F 


retry if not zero yet 


2Ea8- 


JMP S2E76 


drive off art) extt 


2E8B- 


LDA SBB02 


get error byte 


2E8E- 


STA $08 


store it 


2E90- 


STA $09 




2E92- 


RTS 


return to prOEram 



Now the code from $2£65 to $2E6B reads 
in an additional $30 bytes. If you look at the 
raw data on track $0 with a nibble editor you 
will see that the sync field between sectors $0 
and $1 is very large and instead of being fliU 
of $FFs it has a wide variety of illegal bytes 
including $C9s. The code trom S2E69 to $2E74 
checks to see if the next byte is a $C9. If it isn't 
it goes to $2EB3 which decrements SBB02. It 
then checks to see if $BBfl2 is zero yet aud starts 
over again if not. If it is then it jumps back to 
$27E6 which is where we would have been if 
we had found the $C9. The drive is turned off 
and we jump to $2E8b. Here the vahie in ff;BB02 
is put in two zero page locations and we go back 
ic the main program. So, if the $C9 wasn't 
found, our zero page locations would contain 
$00 and would contain a greater value if it was. 

So what we have is not a nibble count but 
a routine that looks fur an illegal byte in the 
sync field between sectors $fl0 and $01 on track 
$0. Since a COPYA of our original disk will 
have cleaned up the sync t'leid with $PFs, we 
know the CoMPare at $2E72 will be negative. 



All we need to do is disable it. iMy first attempt 
was to change the bytes at $27E4 from $D0 0D 
(BNE $2E83) to $D0 00 (BNE $2E76). This 
causes the code to continue on to die next 
instruction regardless of the outcome of the 
CoMPare, Unfortunately, when I went to boot 
the disk the boot stopped betbre it even got to 
the check of track $0. 

This usually means thai there is a checksum 
being done elsewhere in the program to insure 
that the code which checks track $0 has not been 
altered. The first thing Uiat I tried was to see 
if I could find the jump subroutine that called 
the code in the hope that I could trace it back 
to the checksum routine. However, I couldn't 
find the JSR and decided that it was being done 
indirectly through the stack, so I gave up on 
that idea. The other possibility is to disable the 
branch at $27E4 while leaving the checksum 
unaffected. Checksums are done with EORs 
(Exclusive OR), and as any of you have spent 
time with a piece of paper working out EORs 
know the result is not affected by the order in 
which the bytes are EORed. That is, a group 
of ten numbera will always produce the same 
EOR result regardless of which number is 
EORed finjt, second, etc. Luckily there arc two 
NOPs ($EA, No operation) in the code at 
$2E7C which will not be used on the check of 
our copy, so it is simply a matter of switching 
them with the instruction at $2E74. 

The Fix 

Use COPYA to copy your Homeword disk. 
Boot up your sector editor and make the 
following changes: 

Track Sector Byte Front To 



IIB 



!9 



$74 $D0 $EA 

$75 $0D $EA 

J7C $EA $D0 

_ „. .- „ $7D $EA $00 

That's it! you now have a COFYAabie 
version of your Homeword version 2.1 
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softkey for... 



Borroived 
Time 



iHl 



by Jeanne Edwards 



Aclivisim 

PO Box 7287 

Mountain ^iew, CA 94039 

$39.95 

Requirements; 

Apple ]t 

Super tOB 1.5 

A sector editor 

A disk search utility 

A notched double sided disk 

Whether you are into adventiire games or 
not, 1 believe you'll find BwrowcEl Time (BT) 
ftxim At'.tivtsinn is by far a superb combination 
of graphics and lechnieal expertise. With ihe 
use of pull-down menus and a list of possible 
commands, BT is a very enjoyable game 
requiring more than the usual amount of skill 
in solving the mystery. You take on the role 
as Private Eye Sara Spade with a cast of many, 
and attempt to solve the case. Meanwhile, a 
couple of no-good thugs are trying to retire you 
early, pennanently, at every move. Hie audiors 
have put a lot of effort into this adventure to 
take into account the myriad of commands that 
the player might i.ssue. The only playing tip 1 
have at this time is to issue "QUICKSAVE" 
often. Becau.ije the game writes to the master 
disk and is copy protected, I felt it needed to 
be deprotected. 

This wa.s my first effort at creating a 
coutrollei for Super lOB. At first, I thought it 
would be too complicated, but after some 
delving into some sample controllers and 
reading the documentation I was quite 



impressed at the ease of use as well as the 
capabilities ii provides. 

In scoping out BT to find out how to escape 
the killers (the copy protectors) , 1 was unable 
to read the disk. So what's a person to do? Call 
the Ghostbusters? No, AcUvlsion has copy 
protected that also. I have almost all of the back 
issues of COMPUTIST and they have proved 
to be invaluable in deprotecting disks. Issue No. 
30 has "a softkey for "Space Shuttle" by 
Activision but li won't work on this game. Do 
you think the software companies have a 
subscription to COMPUTIST? I just love a 
challenge, so let's put on our eye patches and 
brandish our rapiers while the timid at heart go 
straight to the cookbook solution. 

First we need to boot up our nibble editor. 
I use Copy TI PIu,s 6.0 so 1 can switch back and 
forth bewtwecn the nibble editor and sector 
editor without having to reboot, The address 
field prologue for track is normal, but the 
address field epilogue changes for each sector 
throughout the disk. From track to SI 1 , they 
use different address prologues and then start 
over with the same sequence again all the way 
through to track $22. The data on the reverse 
side is protected in the same manner so this 
softkey needs to be used for both sides. 

Here is a list of the address prologues used 
on each track; 



Track 


Address Prologue 


m 


D5 AA 96 


n.iii.m 


D5 97 EE 


j;z.?l2,$22 


D5 9A EF 


S3.H3 


D5 9B F2 


S4,II4 


D5 90 F3 


S5,S15 


D5 9E F4 


SG,Ufi 


DS 9F FF 


$7, $17 


D5 A6 F7 


$8.S18 


D5 ED 96 



$9, $19 


D5 EE A6 


SA.HA 


05 EF AA 


SB.tlB 


05 F2 05 


SCSIC 


05 F3 OF 


SD,S1D 


D5 H EA 


SE.SIE 


05 F5 AE 


SF.SIF 


D5 FS FE 


m m 


D5 95 ED 



While making the Super lOB controller, 1 
noticed thai Super tOB has the Cc^ability to alter 
the address epilogues but not to ignore them. 
This can be done with a POKE 47507,0 and 
POKE 47517.0 while reading, then while 
writing, change them back to normal with a 174 
and a 164 respectively. This feature can be 
added to Super lOB itself as I have done, but 
for you readers, 1 created a controller to take 
care of ignoring the address epilogues while 
reading and restoring them back to normal when 
writing. 

Once we have a deprotected version, there 
are a few sector edits to conduct. The address 
epilogue checks can be edited to read normal 
DOS 3.3 epilogues (DE A A) by changing the 
instructions that check for the protected ones. 
On track sector 1 , byte SFB, you will find 
D9 AD i 1 (CMP $1 lAD.Y), Change this to 
C9 DC EA (CMP #SDE, NOP); the NOP is 
there to replace the third byte of the original 
instruction. At track sector 2, byte $86, 
change D9 BD 11 (CMP $1 IBD.Y) to C9 A A 
EA (CMP #$AA, NOP). 

Borrowed Time's addres.s prologue lookup 
table was found ou irack sector 9, starting at 
byte .$AD by using a disk .search utility to look 
for a sequence of changed address prologues, 
i.e. 97 9A 9fl (sec above tabic), 'i'o fix this, 
change all bytes $AD-$BC to the value $AA 
and change bytes SBD>SCC to $96. At this 
point, I thought I was finished because I couldn't 
locate an address prologue table on side 2. After 
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booting up side 1 of slie depiotected version, 
side 2 would not be accepted, but the program 
wou]d accept the protected side 2 . All Watson. 
tJic address piGiogue table for side 2 is on side 
1 . Back to the disk searcher. . . at track. 3, sector 
$D, addresses $5A-S69 and S6A-S79, 1 found 
it. That table is fixed the .same way. 

Additionally, the address epilogue compare 
instractions need to be taken care of at track 
3 sector SB, byte S56, changed from D9 5A 
6D (CMP S6D5A.Y} to C9 DE EA (CMP 
i^SDE. NOP) and at byte S61 . from D9 6A 6D 
(CMP S6D6A.Y) to C9 AA EA (CMP #$AA, 
NOP). Be sure to save the changes to the disk. 

'' Cookbook 

1) Install die Borrowed Time controller in Super 
lOR. Line 1620 ofthe controller tells Super lOB 
to Ignore the address epilogues while line 1060 
normalizes these checks during the write 
sequence. Line IM5B checks for tracks 16 and 
32, where the sequence of clianged address 
prologues starts over. The data statements are 
RESTOREd rather than having to type in 34 
data statements, 

2) Copy t>oth sides of Borrowed Time with the 
same controller. 

3) Using your sector editor, perfonii the 
following sector edits on side 1 only. 

Track. Sector Byie(s) From To 



Load 9 .=• (i-\ e Save 9 a t^i e 



$0 
n 
$0 


SI 
SI 

$1 


$FB 
IFC 
$FD 


m 


$C9 
$DE 
$EA 


$0 


S2 
S2 
S2 


506 
507 

m 


$D9 
SBD 
Sll 


SC9 
SAA 
?EA 


IS 


19 
*9 


SAD-IBC 
$BD-SCC 


Sxx 


JAA 

m 


S3 


SD 
SD 


S6A-t79 




{AA 

m 




is standing ne;-<t to 
f f o n t do o r ■ 
= N 

A t hi u 9 J u ni p £ f ■ r o rn n 
a n id lets hi i s guns b 
It s e e ivi s that the 9 
ended- W o li Id y li ii 
try again? <Y/N>UiJ 

J3 SB S55 SD9 SC9 
S3 SB S57 S5A 5DE 
S3 SB S58 m SEA 





£=G! 


1 '..' y- 1 


i 




1 


;— • 


1 Return 


i::ii''i 1 


J E ri t e r 


ft\ 1 


1 bet 


'1 


an 


1 Drop 
J L i 


^' 


en 


^ 


oiTian 


1 Arrest 


: 


esk 




Tel 1 


=■ h n e 




S h W 


? Q m 




Talk 


I1 f 




Search 


■J i n d w 




K i 1 1 


1 M £ e i R 


^ 


Folio i.i.t 


It 




Cut 


Stairs 




F' e n 


Water 



$3 


SB 


S61 


SD9 


SC9 


S3 


S8 


S62 


S6A 


SAA 


S3 


SB 


S63 


J6D 


SEA 



4) Put away your master disk and start playing, 
because you're living on Borrowed Time. 

controller 

1000 REM BORROWED TIME 

1010TK = 0:LT = 35:ST = I5;LS=15:CD=WR;FAST 

= 1 
1020 GOSUB 490 -. POKE 47507 ,0 ; POKE 47517 ,0 :HB 

= 55 : I FTK>0 THEN GOSUB 190 
1030 GOSUB 610 :MB = MB + 16 :TK = TK + 1 : IFTK 

= 17 OR TK = 33 THEN RESTORE 



gaffie Saue ganie 




^El 



k 



Return 



sijO stand 

"Hii peeper? heard tht 
latest?" he asks- 
You greet your pal? 
H a I.U k e y e J i.u h o r u n s N e w 
U i t y ' s most p o F' u I a r 
n e ij^ s s t a n d ■ 



Enter 
Get 
D r ci p 
Look 
Arrest 
Te I I 
S h 1^ w 
Ta I k 
Search 
Kill 
Fo I low 
Cut 
Open 



I UP 1 
N 



the 



o M.I here 

I Br€i m 

a it\ e ha: 
k e t o 



1040 I F MB < 152 THEN GOSUB 190 : GOTO 1030 
1050 GOSUB 230 : POKE 47507 ,174 : POKE 47517 

,164 .TK = TK-7 .MB = 151 
mm GOSUB 490 : GOSUB 510 ; IF PEEK (TRK ) = LT 

THEN 10B0 
1070TK = PEEK(TRK) :ST = PEEK (SCT ) ; GOTO 1020 
1080 HOME ■ PRINT "COPYDONE" END 
5000 REM NO CHANGE ON TRK 
501SDATA213 .151 ,233 

5029 DATA 213 ,154 ,239 

5030 DATA 213 ,155 ,242 
5040 DATA 213 .157 .243 
5050 DATA 213 ,158 ,244 
5060DATA213 ,159 ,255 
5070DATA213 .166 .247 
5030DATA213 ,237 ,150 
5093 DATA 213 ,238 ,165 
5100DATA213 ,239 ,170 
5n0DATA213 ,242 ,213 
5120DATA213 ,243 ,223 
5130 DATA 213 ,244.234 
5140 DATA 213 ,245 ,174 
5150DATA213 ,246 ,254 
5160 DATA 213 ,150 ,237 



A I I 

Man 

Nan 

Woman 

Desk 

Phone 

Room 

Door 

Window 

Myse I p- 

It 

Sta i rs 

Water 



controller checksums 



1000 


- J356B 


5040 


- $1932 


1010 


- $2544 


5050 


$8CiB 


1020 


- ■$F402 


5060 


■ I62CB 


1030 


- SD637 


5070 


- tAiD9 


1040 


- JA1S9 


50S0 


- $013C 


1050 


- S957D 


5090 


- $8C54 


1060 


- i07ii 


5100 


- iC782 


1070 


■ $7CAA 


5110 


- $42BA 


1030 


- $AB6B 


5120 


- $0092 


5000 


- t224F 


5130 


- $611B 


5010 


- IC591 


5140 


- JD2DB 


5020 


- SC9D5 


5150 


- SDB5F 


5030 


- S43A9 


5160 


- S3871 
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Amazon 
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by Rich Etarip 



Tri Ilium Software 

One Kendall Square 

Cambridge, MA 02J39 

Requirement!): 

64K Apple II Plus or compatible 
DOS 3.3 System Master disk 
A sector editor 
4 blank diskette sides 
Amazon disks 

Amazon it; a four-sided hi-res adventure 
game from Trillium Software. I didn't get muth 
of a chance to look at the game, itself becau.se 
! was really more interested in looking at the 
protection used on it. The first thing I found 
out is that two of the sides are protected the 
same way and two sides are not protected at all. 
Now you would think tiiat because of this, the 
program would use a normal RWTS to read 
from the normui dialtb and a modified RWTS 
to read from tiie protected disks. Wrong. 
Amazon uses a very strange looking modified 
RWTS which is able to read from eittier of the 
disks depending on which it encounters. What 
this softkey will involve is first nonnalizing the 
two protected sides of the disk, then replacing 
their RWTS with a normal DOS 3.3 RWTS. 

Before I could noraiulize the protected disks, 
1 had to know how they were protected first. 
To find this out. I took out a nibble editor and 
examined the address and data marks on the 
disk. From this I found that Amazon uses 
modified address marks of AA D5 AB and DE 
AB iiiid data marks of AA D5 EB and ED AA. 
What is involved here is reading from the 
onginal diaks uaing their address atid data marks 
and then writing to the copy di.sk using normal 
address and data maiks. Super lOB can be made 
to do this easily, but just for kicks die COPY A 
program from the DOS 3.3 master disk can be 



modified to do this. We'll get to that later on. 

1) One thing that is ESSENTIAL to the 
deproteeiion of this game is the volume numbers 
of the disks. Sides 1 through 4 MUST have the 
respective volume numbers of 1 through 4, This 
should be taken care of before anything else is 
done. You should also label each side so you 
know which side is which. 

INITialize side 1 with volume number 1. 

INIT HELLCVl 

Repeat with sides 2, 3. and 4, 

INIT HELLO,V2 
INIT HELLO,V3 
INIT HELLO, V4 

2) Now that you are finished, LOAD COPYA 
from the system master diskette and change line 
250 so it does not formal your copy disks, 

2Se FT=1 

After you make this change run the program 
and copy sides 2 and 4 of Amazon, COPYA 
should have no problem copying these sides 
because they are normal DOS, 

3) Once the copying is finished make the 
following modificafions to the COPYA 
program: 



78 POKK 47426,24 
196 GOSUB 489 
257 GOSUB 5»e 



POKE 929,234 



Also, enter lines 400 through 550 from 
Listing 1 , These tines modify DOS to read from 
the protected disks and write back to normal 
DOS. The numbers in the POKE statements 
must be entered exactly as seen or the program 
will not be able to copy so type carefiilly. 

4) After you have added lines 400 through 55fl 
into COPYA (i know, I hate typing too) run 
the program and copy sides 1 and 3 , The disk 
drive wUI do some grinding during the first read 
phase because it can't read track 0, sector (the 
only normal sector on the disk). However, the 
rest of the disk will copy with no problem. 



5) Now that the copying is complete, reboot 
DOS and run your .sector editor. Then read 
track sector from the original Side 3 and 
rewrite it to die copy Side 3, Now make the 
following sector edits to Side 3. Keep in mind 
that Side 3 is the Boot Side. 



Track 


Sector 


Byte 


From 


To 








4A 


AA 


D5 








53 


05 


AA 








5D 


A8 


96 








88 


AA 


D5 








91 


D5 


AA 








9B 


EB 


AD 





3 


lA 


AA 


D5 





3 


23 


D5 


AA 





3 


20 


AB 


96 





3 


57 


AA 


D5 





3 


SB 


D5 


AA 





3 


6A 


EB 


AD 



6) The final step in this softkey is replacing 
Trillium's RWTS with a normal RWTS. A 
problem arises here. Trillium's RWTS runs 
from $8600 to SBDFF and the normal RWTS 
is at $B800 to SBFFF. If we were to replace 
their RWTS with ours it would not work. 
However, we can relocate the normal RWTS 
to SB600. Apple's Programmer's Aid ROM 
contains a machine language relocating routine, 
so we can use this to relocate the RWTS at 
.$B600, 

The first part of this step is getting the 
Programmer's Aid ROM into memory. It is no 
longer available normally (as ROM) but Apple, 
in its infinite wisdom, includes it inside the 
Integer BASIC file on the DOS 3,3 System 
Master, Boot the DOS 3.. 3 Master diskette so 
that the HELLO program loads Integer into die 
RAM card. When this is finished, get into 
Integer BASIC and enter die monitor. 

INT 

CALL -151 
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Adventure 



Now call up the Programmer' <; Aid 
Relocating routine at $D4D5, 

U4D5G 

To relocate a block of memory you must 
specify tfie destination address ($B600) followed 
by a less-than sign (<), and then the start and 
end address of" the memory you want relocated 
(B80O.BFFF). Hnally rype a OS . an Asterisk 
(*), and press Return. 

Bd(W<B8»fl.BFFFES * 

Now you must type die same exaL-l thing 
again, but excluding the asterisk this time, 

B6e»<B8»e.BFFFOS 

The relocated RWTS is at SB60O now and 
il must be moved lo safe memory ko we can 



iiiiiiiirii" u- 



K-337 



reboot DOS. Move, it to $4600 and then reboot 
a regular DOS. 

46e«<B6M.BDFFM 
C6««G 

7) Now all we have to do is write the relocated 
RWTS 10 Side 3 of Amazon. Enter the monitor 

first. 

CALL -151 

Then enter die hex dump in Listing 2. This 
routine will write the RWTS at MMB to the 
Amazon disk. This will be written to Track 
Sectors $8 through SF. 

Once Listing 2 is entered, insert the backup 
of Amazon Side 3 and execute the routine at 
$6000. 



landsat n-505 




INPUT 




PROCESSED 




OUTPUT 




rans 
cvd 



21.09321 
29.02349 



lat 
long 



09.5rs file-01 
76.30H sctr-09 

|||l : 9ain-09.991 



69ft9G 

We're all finished. You should now have a 
working COPYAble version of Amazon. 
Remember, if you wish to make hiiilier backup 
copies of Amazon, the four sides must contain 
their respective volume numbers. The test copy 
program to use is the Locksmith quick copier 
because it copies the volume of the disk too. 

Have fun! 

Hsling 1 



400 REM CHANGE 
410 POKE 47335 

4?356 .235 

.170 
420 POKE 47187 

47197 ,235 
430 POKE 47445 

47466 171 

.171 
440 POKE 48250 

48260 .171 
450 RETURN 
500 REM CHANGE 
510 POKE 47335 

47356 .173 

,170 
520 POKE 47187 

47197 ,173 
530 POKE 47445 

47466 ,150 
170 
540 POKE 48250 

48260 .150 
550 RETURN 



MARKS FOR READING 
,170 : POKE 47345 
: POKE 47413 ,237 : 

170 , POKE 47192 
: POKE 47262 ,237 
170 : POKE 47455 
: POKE 47505 .222 : 

170 . POKE 48255 
: POKE 48312 .171 

MARKS FOR WRITING 
,213 : POKE 47345 
; POKE 47413 ,222 : 

.213 : POKE 47192 
: POKE 47262 ,222 
213 : POKE 47455 
■ POKE 47505 ,223 , 

213 . POKE 48255 

: POKE 48312 ,170 



213 ■ POKE 
POKE 47423 

213 : POKE 

213 : POKE 

POKE 47615 

213 ; POKE 



170 . POKE 
POKE 47423 

170 : POKE 

170 : POKE 

POKE 47515 

170 ; POKE 



listing 2 



6000: A9 00 SD EC B7 8D EB B7 $9297 

5008- 80 PS B7 A9 08 80 ED B7 JOACB 

6010: 80 FF B7 A9 46 8D Fl B7 $3EE6 

6018 A9 03 8D F4 67 A9 B7 A0 $C55l 

6020: E3 20 B5 B7 EE Fl B'/ £E J3F1D 

6028; ED B7 CE FF B7 D0 EE 60 S90CB 



i 
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Speed 



by Tim Beckmann 



speed Reader II 

Davidson ■&. Associaies. Inc. 

m69 Groveoak Flace Hl2 

Ram-ho Pahs Verdes, CA 90274 

Requirements: 

4yK Apple II and up 
Super lOB 1.5 
A blank disk 

Speed Reader U is an educational progTam 
that is meant to help you increase your reading 
speed. The program has quite a bit of 
educational value because data disks are 
available for many different age groups, but 
much of this etiucational value is offset by the 
fact that Speed Reader is protected quite 
heavily. 

The Protection 

I suspect that Speed Reader was protected by 
the Lock-It-Llp program because parameter lists 
say to use the parameters for Lnck-It-Up. After 
trying ihcso parameters several times without 
success, I decided to remove the protection. 
This procedure should be helpful for soRkeying 
other program,s protected by Lock-It-Up. 

My first hint as to how I should go about 
softkeying this disk was the Basic prompt that 
appeared when the disk booted. This usuaffy 
means that using the program's own RWT.S and 
the Swap controller with Super fOB is all that 
is tieeded to remove the protection. 
Unfortunalely, this procedure did not work for 
Speed Reader because when it was protected 
by Luck-lt-Up, the RWTS was re- written. 

Widi this avenue closed off, my next step was 
to get out my nibble editor and look at each 
track. To ray dismay, I found that tracks S0 
through $F all had dilTereut addressi markers. 
This pattern in repeated on tracks $10 throtigh 
$ I F and tracks $20 through $22 eacii have 
different address markers. Address markers 



are, as you probably have learned by now, what 
DOS looks for to 11 nd which sectors it is 
reading. Iei addition to this, the address end 
markers have been made different on each 
sector and llie data marker on each track has 
been changed to D5 AA B5 from the normal 
D5 AA AD. 

With these changes identified, I made a Super 
lOB controller to copy the disk. As I swn found 
out it was not that easy. The first time I tried 
to copy the disk, I got a checksum error on 
some sectors. After changing the controller to 
ignore checksum errors, tlie disk copied widiout 
trouble. But when 1 cheeked the softkey ed disk. 
I found that the catalog and the rest of the disk 
just contained garbaged data. The only 
explanation tliat entered my mind then was diat 
a change was made in the read translation table 
on the original disk. A read translation table is 
a tabic of values that is used to decode the data 
lead in from the disk. (For more about this see 
Beneaih Apple DOS by Worth and Lechner). 
This would explain both the cfiecksum errors 
and the garbaged data. By careful examination 
of the original Speed Reader DOS. I located the 
read translation tabic and found two changes 
made to it. 

After changing the controller to read with the 
altered read translation table, the controller 
copied the disk without errors, I now thought 
that I was finished with the softkey, btu the 
programs still have to be altere d to work 
correctly . All the programs have a ISZI as the 
second character in its name. Also, some of the 
programs check to see if the DOS in memory 
is Still the Lock-It-Up DOS. These program 
lines look like this: 

400 IF PEEK (40324) = 173 OR 
PEEK (47094) <:> THEN 1000 
We want to change these lines to look like this: 

400 IF PEEK (40324) <> 173 OR 
PEEK (47094) = THEN 1000 
The line is altered like it is so that it will work 
with normal DOS. We cannot just delete the 
line becau.tje the programs are ver>' dependent 
upon the amount of memoiy tliey take up. After 
correcting these things the softkey is finished. 



Step By Step 

1) INITialize a blank disk, preferably with a 
fast DOS such as Pronto-DOS. 

INIT HELLO 

2) Install the Speed Reader controller listed at 
the end of this article into Super lOB and run 
it to copy the Speed Reader D disk. 

3) Cliange ihename of die hello program to gel 
rid of the |HZJ in the name, 

RENAME IlBzlELLQ. HELLO 

4) Change the lines in the programs thai check 
for the Lock-It-Up DOS. 

LOAD HELLO 
POKE 1«4.32 
POKE :\?,,M 

(that last POKE was to change the width of the 
text window so Applesoft won't insert extra 
spaces in the LISTing of a BASIC line). 
Change line 400 to look like the f of lowing: 

400 IF PEEK (40324) <> 173 
OR PEEK (47094) = THEN 1000 
Do this by LISTing fine 400, then using live 
Escape key to put you into "escape" mode. 
Move to the twginning of the line using I, J, 
K and M keys, then hit the space bar to get out 
of "escape" mode. Then trace over the line 
using the right arrow key, making the necessary 
changes as the cursor passes over them. 

POKE 164,8 
SAVE HELLO 
LOAD SEZIPEED 1 

Change line 91 to look like the following: 

91 CH=VAL(AJ): PRINT CH: POKE 8185, CH: 
IF PEEK (40324) < > 173 OR 
PEEK (47094) = THEN 110 
Caution: Notice that line 91 originally is 
lacking a PEEK before the first address. You 
must insert this PEEK or else the program will 
reboot. 

Also change the and the < > around in 
line 106 
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SAVE SElPKED 1 
LOAD SEZ1PEED2 

Change lines 202 and 207 as before. 

SAVE S ED PEED 2 

LOAD SHZlPEED READER U 

EDITOR 

Change line 3 as tjefore. 

SAVE SEHPEED READER 11 
EDITOR 

Your copy of Speed Reader n should now 
work just like the original, wirh the exception 
that you can hack this one up, 

Almul The Controller 

This Super [OB controller varies from other 
fast controllers in these ways; 
Line l(t2fl - Allows DOS to ignore the changed 
address end tiiarkers and reads the first thiee 
data statements since: tracks $0-$2 are not being 
read, 
IBM - Makes the necessary changes to the read 



translation tabic and the last byte of the data 

marker, 

IftSd - Checks to see if track SIM has been 

reached and if it has, it restores the data so it 

can begin on the pattern again. 

HMfl - Changes the address header to the correct 

one for the track to be read. 

1B9B - Restores the correct vakies for the read 

translation table and normalizes DOS so it can 

write normally. 

1208-1380 - Data for the address header 

changes. 

controller 

1000 REM SPEED READER 1 1 CONTROLLER 

1010 TK = 3 ;LT = 4 :ST= 15 -13=15 :CD = WR:FAST 

= 1 
1020 POKE 47426 ,24 ; GOSUE 190 ■ GOSUB 190 ■ 

GOSUB 190 
1030 POKE 47560 ,213 : POKE 47825 ,03 : POKE 

47356 ,131 
1040 Tl =TK : GOSUB 490 



Type the phnase : 

successful butchers debate politely 



That's ri^ht. 



±¥ Next level 



2^ Get score 



1050 IFTK/16= INT (TK/ 16) THEN IFTK/ 16 = 

1 THEN RESTORE 
1060 LT = TK + 1 : ffiSUB 190 : GOSUB 510 
1070 IF PEEK (BUF )= MB THEN 1090 -^ 
1080TK = TK+ 1 : I F TK <: 35 THEN 10E0 
I090TK = T1 . GOSUB 430 : GOSUB 230 : POKE 47650 

,165 ; POKE 47829 ,213 
1100 GOSUB 510 
1110TK = PEEK(TRK) ST^PEEK (SCT ) : IFTK< 

35 THEN 1030 
1120 HOME : PRINT "DONE' WITir COPY" : END 
1200 DATA 213 ,170 ,150 

,151 

,150 

,151 

,150 I 

.151 

,150 

,151 

,158 

,159 

,158 

,159 ''> 

,158 1 

,159 ' 

,158 

,159 

,182 

,183 ''* 

.182 



1210 DATA 213 .170 
1220DATA215 .170 
1230 DATA 215 .170 
1240DATA213 ,170 
1250 DATA 213 .170 
1260 DATA 215 .170 
1270 DATA 215 .170 
1280 DATA 221 ,170 
1290 DATA 221 ,170 
1300 DATA 223 
1310 DATA 223 
1320 DATA 221 
1330 DATA 221 
1340 DAIA 223 
1350 DATA 223 
1350 DATA 245 
1370 DATA 245 
1380 DATA 247 



170 
170 

170 
170 
170 
170 
170 
170 
170 



controller checksums 


1000 - $3556 


1230 


- IA3AC 


1010 - $E357 


1240 


- JFAB6 


1020 - $5EF3 


1250 


- I8B4C 


1030 - J9322 


1260 


- S6E41 


1040 - t67AB 


1270 


- S9DA8 


1050 - 18232 


1280 


- SB828 


1060 - SBA93 


1290 


S99E8 


1070 - S37F5 


1300 


- S1425 


1080 - S2435 


1310 


- S07CC 1 


1090 - J153F 


1320 


- $FEC0 


1100 ' $53F1 


1330 


- 11314 


1110 - $F0CA 


1340 


- $7215 


1120 - $8DAS 


1350 


- S2DA8 


1200 - $E896 


1360 


- S4D04 


1210 - JF590 


1370 


- SD192 


1220 - SBC39 


1380 


- $FD9B 1 
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Tftc Book Of Softk^s 



VoCumes I and 11 



Legends tell of the days when the ancient back issues of 
Hardcore COMPUTIST were readily available to anyone who wished 
to purchase them. Those days may be long since past, but the 
information contained in these ancient documents has been 
diligently transcribed to the pages of a modern reference work: The 
Book Of Softkeys. 

From deep within the COMPUTIST archives comes a collection 
of softkeys originally contained in issues 1 through 5 and 6 through 
10 (B.O.S. Volumes I and II respectively). The two volumes also 
contain some of the more useful programs and tutorials presented 
in those early issues. The books make an economical alternative 
to those rare (and unavailable) back issues of Hardcore COMPUTIST. 

The world may end soon, so it is imperative that you obtain this 
valuable information before it is no longer available. 

Such is the stuff that legends are made of. 



Volume I; Issues 1-5 ($12.95) 

cuntains softkeys for: Akalabeth | Ampermagic | Apple Galaxian | Aztec | Bag of Tricks | Bill Budge's 
Trilogy j Buzzard Bait | Cannonball Blitz | Casino | Data Reporter | Deadline | Disk Organizer 11 [ Egbert 
H Communications Disk ] Hard Hat Mack | Home Accountant | Homeword | Lancaster | Magic Window 
U I Multi-disk Catalog | Multiplan | Pest Patrol | Prisoner 11 | Sammy Lightfoot | Screen Writer II | 
Sneakers | Spy's Demise | Starcross | Suspended | Ultima IT | Visifile | Visiplot | Visitrend [ Witness | 
Wizardry | Zork I j Zork II | Zork IH | PLUS how-to articles and program listings of need-to-have 
programs used to make unprotected backups. 

Volume II: Issues 6-10 ($17.95) 

contains softkeys for; Apple Cider Spider | Apple Logo | Arcade Machine | The Artist | Bank Street 
Writer | Cannonball Blitz | Canyon Climber ] Caverns of Freitag | Crush, Crumble & Chomp | Data 
Factory 5.0 | DB Master | The Dic*tion*ary | Essential Data Duplicator I & III | Gold Rush | Krell 
Logo 1 Legacy of Llylgamyn | Mask Of The Sun | Minit Man ] Mouskattack | Music Construction Set 1 
Oil's Well I Pandora's Box | Robotron | Sammy Lightfoot | Screenwriter nv2. 2 | Sensible Speller 4.0, 
4.0c, 4.1c I the Spy Strikes Back | Time Zone vLl | Visible Computer: 6502 | Visidex | Visiterm | 
Zaxxon | Hay den Software | Sierra Online Software | PLUS the complete listing of the ultimate cracking 
program... Super lOB 1,5 | and more! 

To Order: Send $17.95 + Shipping and Handling for Volume II and/or $12.95 + S&H for Volume I. Shipping and handling is $2.00 
per book for US orders, $5.00 per book for foreign orders. U.S. funds drawn on U.S. banks only. Washington State orders add 7.8% 
sales tax. Send your orders to: SoftKey Publishing, PO Box 110937-BK, Tacoma, WA 98411 
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DEALERS 

Overstocked on computer magazines 

that seem to have 

MORE ADS than articles? 

Put 

COMPUTIST 

on your shelves, instead! 



Here's how: 

Send in the coupon below and we'll put your dealer info 
in the mail. DON'T WAIT! Apple computer users 
everywhere salute you! 



Vesl PIsase sencl me infoririation on how I can obtain copies of 
COMPUTIST at substantial savings. 



Dealer Name 
Address 



CP39 



City_ 



State_ 



Zip- 



Send to: COMPUTIST, PC Box 110B16, 
Tacoma, WA 98411 or call (206) 474-5750. 



Personalize and 
Protect your Apple 
^ with the 

Bonono Ihip^ 

When you turn on your Apple", this 
remarkable new ROM replacement 
will display your name or personalized 
message with optional password 
protection. r 



- Tl\ *'^ ••&<— h.'jgt 




CALL TOLL FREE: 
_^ 1-800-843-0975 

HT9 Nationwide 

JiPi jr| 1-800-443-9060 

BTH-ff-rtt-tfHffn In California 

Azure Mountain 
Products 

14755 Ventura Blvd., Ste. 1483 Sherman Oaks, CA 01403 




AnDthEr Stiipid DLskbuEtEia r-Shirt AdverttEement 

It's the... 

COMPUTIST 

Multi-Purpose Cloth 

101 uses! use it for... 

Cleaning! Dusting! Poiisiiingl 

Sliopping! Wiping Spills! Gardening! 

A Birdcage Cover! A Birdcage Liner! 

You can even wear it as clotliing! 

A fashion statement! 

A political statement! 

An understatement! 

Yes, I want ^^ CrM.P.Cs in the i5ize(s) indicated below. I have eiicloaed 

$9.95 plus t&x. and shipping for each t-shirt. 

Small 



ADULT MENS: 



Name_ 



/Indium 



-Large 



! -Large 



.ID#. 



Address. 

City 

Country . 



_State_ 



_2ip_ 



. Phone . 



Exp. 



Signature- 



_CP39 



Send Chech or money order toj CTMPC PO Box 11CI937-T Tacoma, WA 96411 
Washington orders add 7,8 % sales tax. Foreign orders add 20 % shipping and handling- 
US funds drawn on US tanh. OFFER GOOD WHILE SUPPLIES LA&T. 
NOT FOR ILLEGAL, IMMORAL, OR FATTENING liSK. 



Are 
piece 



you 
of the 



Mag Disk B«th 

$4.75 $9.95 $12.95 

□ n 

□ □ 

□ □ 

□ □ 

□ □ 
a □ 
n □ 

□ □ 

□ □ 
n □ 

□ □ 



□ 

□ 
□ 
□ 

□ 

□ 
□ 
□ 
□ 
□ 



40 

39 

38 

37 ... 

36 

35 

34 

33 

32 

31 . 

30 

29 □ □ 

28 □ □ 

27 □ O 

26 □ O 

25 □ a 

za □ □ 

23 • □ 

22 □ □ 

21. . • □ 

20 □ □ 

19 □ n 

18 • O 

tV 17 □ □ 

16 □ □ 

• Book of Softkeya Vcl 3 ... 

15 • □ 

14 - . - ■ • Q 

13 • □ 

12 • □ 

11 • □ 

• Book of Sottkeys Vol 2 S19.95 I 

10 • o 

9 " □ 

a • n 

*7 □ LJ 

6 • □ 

*Bock of Softlseys Vol 1 Sl4,95 I 



□ 
□ 
□ 

a 

□ 
□ 

□ 

□ 

□ 

□ 
□ 



□ 



□ 

□ 

□ 
□ 
□ 

□ 



4 

3 ■ . 

Core 2 

2 

1 

Core 1 

Core 3 < 

Computing 3 . . 

Best of Hardcore Comptrting 

•Core Special SlD.OO. . 

(AM three CORE magtizlnes) 



Special "Both" disk & magazine oomblnation orders apply 
to one issue and its corresponding disk. Prices ahovm are 
for US, Canada, and Mexico orily. 
Some dislis apply to more than one issue and are shown 
as taller bodies. 

■*- Book Of Softkeya volumes do not come with dislra. 

T-r We hiave a llmitsd supply ot these issues. 

• Back issue is no longer avaiiabie 



□ 

U n 

□ 

□ 
□ □ 



□ 



picture? 

COMDUTI6T back issues and 

library disks are frequently 

referenced in current issues. 

Some back issues are no longer available, but library disks 
can still be purchased for all back issues. 

What is a library disk? 

Library Disks are perfect companions for 



only to find that you must have 



So, if you're- 

• Tired of entering lengthy Super lOB Controllers, 
made a typo. 

• Tired of entering LOOOOONG program listings. 

• Tired of spending TOO MUCH TIME looking for errors, 
then you need the library disks. 

Each library disk contains information that would normally have to be entered by the 
user. Documentation for each Library Disk can be found in the corresponding issue. 



Rafes For Foreran Orders 



. Canada and Mexico rates are identical to U.S. First Class unless otherwise specified. 

• Other Foreign Back Issue Rates: $12.25 each, (includes shipping) 

. Other Foreign Library Disk rates: $11.94 each, (includes shipping). Special "Both" disk and 

magazine coinbmations shown do NOT apply to Foreign orders. 

. Other Foreign Book of Softkey Hates: VolTime 1-$17.95 Volimie 2-$22.95 (includes shipping) 



Send me the back issues and/or library dislts indicated: 



Name_ 



_1D#_ 



Address 



City 

Country . 



State 



__ Zip 



Phone . 



Exp.. 



Signature . 



.CP39 



send check or moi,ey order to: COMPUTIST PO BoK 110846.T Tacoma WA 98411 Most °rd^'« flipped 
UPS BO please use street address. Offer good while supply lasts. In Washington state, add 7.8% sales tax, 
U.S. fuiidK drown on U.S. bank. 






Sofikeys | Cycled | AIicrasK Realty | 

Boukler Dash ]&U\ Hard Hat Mack (Revisited) | The 
Ofiier Side | Readers' Sofikevi | F-15 Strike Eugle | 
Championship Lode Runner | Gato V 1.3 1 1, Damtano | 
Wilderness | Golfs Besl | Features | The 
Enhanced/Unenhanced lit \ Looking into Flight 
Simulator's DOS | Core \ Appavaici | Installing a RAM 
(list into DOS 3.3 | 



^aftix-p I Under Fire | Pegasus ]| | Take 
I (revisited) | Flight Simulator II vl.O.S (pan 2) j 
Reader!' Sofikeys \ Magic Slate | Alter Ego 
Rendezvous | Quicken | Story Tree | Assembly 
Language Tutor 1 Avalon Hill gwies | Dark Crystal 
Feaaires I Playing Karatelca on a lie \ Track Finder 
Sylk to Dif | Core | Breaking In: tips tor beginners 
Copy ][ Plus fi.O: a review [ The DOS Alterer 1 „ 



Softk^ya I Flight Simiilaior II v 1,05 | 
AutoDuel I Readers' Sofikeys \ Critical Reading j 
Troll's Tale | Robot Wat | General Manager | 
Plasmania | Telarium Software | KJdwriter v 1 ,0 | Color 
Me I Ftaiures I Screenwriter meeK Flashcatd | The 
Bus Mojiitur [ Mutisepaint for non-Apples [ Cj^re \ The 
Bard's Dressing Ronin | Ailvmicud Playing Jedmiques \ 
Championship Lode Runner | .,,,,,,„,, 



Sofikeys | Hi-res Cribbage | Olympic 

Decathlon | Revisiting F-15 Strike Eagk | Masquerade | 
The Hobbit | Readers ' Sofikeys I Pooyan | The Perfect 
Score I Alitc in Wonderland ( The Money Manager | 
Good Thinking | Rescue Raiders | Feature \ Putting a 
New F8 on Your Language Card | Care | tjiplormg 
PfoDOS by installng a CPS Clock Driver | 



Softkeys \ Crisis Mountain | Terripin 
Logo I Apple Logo'U | Fishies 1.0 | SpellWorks | 
Gamball | Readers' Sofikeys I Rescue at Rjgel | Cr^ey 
Miiiey I Conan ] Perry Mason: The Case of the 
Mandarin Munier j Komnis Rift | Feaiurr \ More ROM 
Running 1 Core \ Infocom Revealed | 



Sofikeys \ Word Juggler | Tlnlc! Tonk! | 
Sundog v2.0 | G.l Joe & Lutas Film's Eidolon ( 
Sammer Games II | Thief | Instant Pascal | World's 
Greatest Football Game | Readers' Sofikeys \ Graphic 
Adventure #1 1 Sensible Grammar & t intended 
Bookends | Chipwits | Hardball | King's Qutsst D | 'ITie 
World's Greatest Baseball Game | Ft^aiure \ Hnw to he 
die Sound Master | Core \ The Maiping of Ultima IV | 



Sofikeys \ Revisiting Music Construction 
Set I Cubit I BaudvUle Software | Hartley Software I 
Bridge | Early Games for Young Children | Tawala's 
Last Rednnbi | Sauien' Siiflkeys \ Prim Shop 
Companion | Kfacking Vol T] | ME>t;bius | Mouse 
Budget, Moiisi! Word &. Mouse Desk | Adventure 
Constitjction Set I Feat\ire \ Using Data Disks With 
Mictozines I Core I Super lOB vl.5 a Reprint | 



«S Mt Sitfike.ys \ Trivia Fcvei i The Original 
Boston Computer Diet | Lifesaver | .Synergislii; 
Software I Blazing Paddles | Zardai i Readers ' 
Sofikeys I Time Zone | Tycoon | Earthly Delights | 
Jingle Disk | Crystal Caverns | Karate Champ | 
Feature \ A Little Help With The Bard's Talc 1 Core j 
Blasi3c« I Unrestricted Ampers^ j 




'Sofikeys \ Millionaire | SSFs HDOS | 
I Spy vs. Spy | Dragonworld | Readers ' 
Sofikeys I King's Quest 1 Mastering the SAT | Easy as 
ABC I Space Shuttle | The Factory ( Visidex LIE I 
Sherlock Holmes | The Bards Tale | Feature \ 
Increasing Your Disk Capacitj' | Core [ Ultiuiaker IV, 
an Ultima IV Character Editor | 



Sofikeys | Threshold | Checkers v2.I | 
Microtype I Gen. & Organic Chemistry Scries | Upto\™ 
Trivia I Murder by the Doieu ] Renders ' Sofikeys \ 
Windham's Classics | Batter lip | Evelyn Wood's 
Dynamic Reader | Jenny of the Prairie | Lcam About 
Sounds in Reading | Winter Games | Feature | 
Customizing the Monitor by Adding 65C02 
Disassembly | Core | The Anitnaior | 

'Sofikeys \ Ultatia IV [ Robot Odyssey | 
ivous I Woid Attack & Classmate | Three from 
Mindscapc | Alphabetic Kcyboarding | Hacker | Disk 
Diiscior i Lode Runner t NflDlfi | Readers ' Sofikeys \ 
Algebra Series | Time is Money 1 PJBtop □ | Apvcniure 
to Atlantis I Fealure | Caplunng the Hidden Archon 
Editor I Core | Fingerprint Plus: A Review | Beneath 
Beyond Casde Wolfenstein (pan 2) | 




Sofikeys \ Microzines 1-3 | Microzines 
7-9 I Micnam^ (allemate method) | Phi Beta Filer | 
Sword of Kadash | Reihlirry ' Sofikeys \ .\nolher Miner 
2049er | Learning With Fuizywomp i Bookends | 
Apple Logo 11 I Murder on the Zindemeuf | Features \ 

Dalcks: ExploriDg Anifieial Intelligence | Making 32K 
or I6K Slave Disks [ Core \ The Games of 1985: part 
III 



Sofiktys I Caononball Blitz | Instant 
Recall I Gesslor Spanish Software | Mote Siickybears | 
Readers' Sofikeys | Financial Cookbook | Super 
Zitxxun I Wizardry | Preschool Fun | Holy Grail I 
Inca I I38K Zajtxon | Feature \ Protdil i Core \ Games 
of 1985 part I | 



Sofikeys \ Dfl Master 4.2 I Business 
Writer | Barron's Computer SAT | Take 1 | Bank Street 
Speller | Where Ii! The World Is Carmen Sandiego [ 
Bank Street Writer 128K ; WoidCfmllenge {Headers' 
Sofikeys \ Spy's Demise | Mind Prober i BC's ^uest For 
Tires | Early Games J Homeword Speller ( Femure \ 
Adding IF THEN ELSE To Applesoft I Core \ DOS To 
PruDOS And Back | 



Sofikeys I Electronic Aris software I 
Crolier software | Xyphus | F-15 Strike Eagle | Injured 
Engine [ Readers' Sofikeys | Mr. Robot And His Robot 
Factory | Appleciliin n \ Alphabet Zoo | Fathoms 40 | 
Story Maker | Early Games Matchmaker | Robots Of 
Dawn I Feature j Essential Data Duplicator copy 
pros I Cure \ Direc't Sector Access From DOS | .. 



Sofikeys \ Miner 2CW9er | Lode Runiiei i 
A2-PBI Pinball | Readers' Sofikeys \ The Eleist | Old 
Ironsides | Grandma's House | In Starch of the Most 
Amazing Thing | Morloc's Tower ( Marautier | Sargon 
in I Features \ Cusioniized Drive Speed Control | S^jer 
lOB version 1.5 | Core. 1 The Macro Systran I 



Sofikeys \ Sargon HI | Wizardry: Ptovinc 
Grounds of the Mad Overlord and Knight of Diantonds 
Retider' Sdfikeys \ The Report Card VI . I | Kidwriier 
Feature \ Apple ][ Bool ROM Disassembly I Csre 1 The 
Graphic Grabber v3.0 | Copy Q-t- 5.0: A Review | The 
Know-Drive: A Hardware Evaluation | An Improved 
BASIC/Binarj- Combo I 

■L S9 ReaAen' Sofikeys \ Rendezvous With 
Rama | Peachtfee'sBack To Basics Atisunling System | 
USD Statistics Series | Arithmetickle | Aiiditwkicks and 
Early Games for Children | Features \ Double Your 
ROM Spare | Towards a Better F8 ROM I The Nibblen 
A Utiiiiy Program to Eiaminc Raw Nibbles From Disk | 
Core I The Games of 1984; In Review-part II | 

^L ^E Sofikeys \ The Print .Shop | Cm.tswi>rO 
Magic I The Standing Stones | Beer Run j Skyfni | 
Random House Disks I Features \ A Tutorial For Disk 
bspection and the Use Of Super lOB I S-C Macro 
Assembler Directives (reprint) | Core | The Graphic 
Grabber For The Print Shop | The Lone Catalog 
Arranger vLO Part 2 | 

1 ^5 Sofikey I Sensible Speller for PfoDOS I 
Sideways | Readers' Siffikcys \ Rescue Raiders | Sheila | 
Basic Building Blocks | Artsci Programs | Cross tire j 
feature | Secret Weapon; RAMcard | Core \ I'he 
Controller Writer I A Fix For The Beyond Castle 
Wolfenstein Softkey | The Lone Catalog Arranger 
Part 1 I 

^ Sofikeys \ Zaxxon | Mask of the Sun | Crush | 
Cmmble & Chomp | Snake Hyte | DB Master | 
Mouskattack | Features | Making Liberated Backups 
Thai Retain Their Copy Protection | S-C Assembler: 
Review | Disk Directory Designer | Core | Core filer: 
Pan 1 I Upper & Lower Case Output for Zork | .... 

^K Ultima II Character Editor | Sofikeys \ Ultima 
n I Wimess I Prisoner Q | Pest Patrol | Adventure Tips 
for Ultima II & m | Copy H Plus FARMS Update.. 

1 Snfikevs | Data Reporter | Multiplan | Zork | 
Features \ PARMS for Copy IT Plus | No More Bugs j 
APT's for Choplifter & Cannonhall Blitz | 'Cnpyrard' 
Reviews \ Replay | Crackshot | Snapshot | Wildcard | 



CORE 3 



.Games: 



Constructing Youi Own Joystick I Cumpding Games | 
GAME REVIEWS: Over .ID of the latest and best | Pick 
Of The Pack: All-time TOP 20 games | Destructive 
Forces | EAMON I Graphics Magician and 
GraFORTH | Dragon Dungeon | 



CORE 2 



Utilites: 



Dj-namic Menu | High Res. Scroll Demo | GOTO 
Label: Replace | Line Find | Quick Copy: Copy | .. 

CORE 1 ...Graphics: 

Memory Map | Text Graphics: Marquee I Boxes 
Jagged Scroller ( Low Res: Color Character Chan 
High Res; Screen Cruncher | The UFO Factory 
Color I Vector (Graphics: Shimmering Shapes | A Shape 
Table Mini-Editor | Block Graphics: Arcade Quality 
Graphics for BASIC Programmers I Animation | .... 

Hardcore Computing 3 

HyperDOS Creator ) Menu Hello | Zyphyr Wars | 
Vector Graphics | Review of Bit Copiers | Boot Code 
Tracing |l Softkey lOB | Interview with 'Mike' 
Markknia I , 
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Super lOB 
Collection 



• What could possibly be better than receiving COMPUTIST every month, typing in the Super lOB controllers and 
deprotecting your favorite software? How about having all the controllers ever printed in COMPUTIST at your fingertips? 
With The Super lOB Collection Volumes I & II, you have just that and more. 

• Each volume (supplied on a DOS 3.3 disk) contains at least 60 Super lOB controllers including the standard, swap, 
newswap and fast controllers. In addition, each disk has the Csaver program from COMPUTIST No, 13. But wait! You 
also get version 1 .5 of Super lOB and a menu hello program that lists the available controllers and, when you select one, 
automatically installs it into Super lOB and RUNs the resulting program.* 

• Several of the controllers deprotect the software completely with no further steps. This means that some programs 
are only minutes away from deprotection (with virtually no typing). 

• The issue of COMPUTIST in which each controller appeared Is" Indicated in case further steps are required to deprotect 
a particular program. f n 



Volume 1 



Volume 1 of the Super lOB collection covers all 
the controllers appearing in COMPUTIST No. 9 
through No, 26. In addition, the newswap and fast 
controllers from COMPUTIST No. 32 are 
included. The following 60 controllers are on 
volume 1: 

Advanced Blackjack. Alphabet Zoo, Arcade Machine, 

Arthun 11, Archon, Artsci Software, Bank Street Writer, 

Barroas SAT, Beyond Castle Wolfenstein, BSW //e 

Ijoader, Castle Wolfenstein, Computer Preparation: 

SAT, Dazzle Draw, DB Master 4 Plus, Death in the 

Carribcan, Dmo Eggs, DLM Software, Electronic Arts, 

F-15 Strike Eagle, Fast Controller, Fathoms 40, 

Financial Cookbook, Gessler Software, Grandma's 

House, The Heist, In Search of the Most Aniaiing 

Thing, Instant Recall, Kidwriter, Lions Share, Lode 

Runner, Mastertype, Match Maker, Miner 2049er, Minit 

Man, Mufplot, Newsroom, Newswap controller, Penguin 

Software, Prinl Shop Graphic Library, Print Shop, 
Rendezvous witli Rama, Rocky s' Boots, Sargon III, Sea 

Dragon, Shiela, Skyfox, Snooper Troops, .Standard 

controller. Stoneware Software, Summer Game.s, Super 

Controller, Super Zaxxon, Swap Controller, TAC, 

Ultima in. Word Challenge, Xyphus, Zaxxon 



Volume 2 



Volume 2 of the Super lOB cotlection'covers all 
the controllers appearing in COMPUTIST No. 27 
through No, 38. The following 65 controllers are 
on volume 2: 

Alice in Wonderland, Alphabetic Key boarding. Alternate 

Reality, AutoducI, Checkers, Chipwits, Color Me, 

Conan.data, Conan.prog, CopyDOS, Crisis Mountain, 

Disk Director, Dragonworld, F.arly Games, Easy as 

ABC, 5- J 5 Strike Eagle, Faniavision. Past controller, 

Fishies, Flight Simulator, Haliey Project, Hartley 

Software (a). Hartley Sotiwarc (b), Jenny of the Prarie, 

Jingle Disk, Kidwriter, Kracking Vol n. Lode Runner, 

LOGO II (a), LOGO II (b), Masquerade, Mastering the 

SAT, Mierotype: The Wonderful World of Paws, 

Microzines 1, Microzines 2-5. Miner 2049er, Mist & 

View to a Kill, Murder on the Zindemeuf, Music 

Construction Set, Newswap controller, Olympic 

Decathlon. OUier Side, Hhi Beta l-iicr, Pitstop 11, Prim 

Shop Companion, RDOS, Robot War, Spy vs Spy, 
Standard con[roller, Sundog V2, Swap controller, Sword 
of Kadash, Synergistic Software, Tawala's last Redoubl, 
Terripin Logo, Threshold, Time is Money, Time Zone, 
Tijit! Touk!, Troll's Tale, Ultima IV. Wilderness, Word 
Attack & Classmate, World's Greatest Baseball, World's 
Greatest Football 



To Order: Send $9.95 for each volume or £19.95 for a complete package that includes: both disks, a reprini of "Disk Inspection and 
the use of Super lOB" and COMPUTIST No. 32, U.S. funds drawn on U,S, banks. Foreign orders (other than Canada or Mexico) add 
20% shipping. Washington state residents add 7.8% sales tax. Mail order.s to: Super lOB Collection; POB } 10846; Tacoma, WA 984! I 

*Requires at least 64K of memory, -^ 

tAlthough some controllers will completely deprotect the program -they were designed for, some will not and therefore require their 
corresponding issue of COMPUTIST to complete the deprotection procedure. 
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